Re: [qubes-users] Ubuntu Template

2017-07-08 Thread Michael MENG
Thanks, i did "apt-get install ubuntu-desktop" and install all application, i 
found all application in shortcut, but still cant found the desktop like 
Windows.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/f242e898-ca47-43f0-a427-b669c94bcfef%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Qubes 3.2 install problem: Encryption requested for LUKS device sda2 but no encryption key specified

2017-07-08 Thread cooloutac
On Saturday, July 8, 2017 at 11:39:05 PM UTC-4, cooloutac wrote:
> On Friday, July 7, 2017 at 8:20:12 PM UTC-4, Christian Merrill wrote:
> > This is similar to the issue I have as well.
> > 
> > Cheers,
> > Christian
> 
> try suggestion at end of this thread 
> https://groups.google.com/forum/#!msg/qubes-users/Eq2zZU5yXEs/qs94AX1uAAAJ

heres another one. 
https://groups.google.com/forum/#!topic/qubes-users/4VsKdxnKHBk

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/3d2fab51-1e57-43e7-80f2-b008f6f3af50%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Qubes 3.2 install problem: Encryption requested for LUKS device sda2 but no encryption key specified

2017-07-08 Thread cooloutac
On Friday, July 7, 2017 at 8:20:12 PM UTC-4, Christian Merrill wrote:
> This is similar to the issue I have as well.
> 
> Cheers,
> Christian

try suggestion at end of this thread 
https://groups.google.com/forum/#!msg/qubes-users/Eq2zZU5yXEs/qs94AX1uAAAJ

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/adee334a-6620-4121-9d82-fc2650814b99%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: certified laptop delivery to Russia

2017-07-08 Thread cooloutac
On Saturday, July 8, 2017 at 12:40:31 PM UTC-4, tai...@gmx.com wrote:
> On 06/26/2017 10:41 AM, cooloutac wrote:
> 
> 
> 
>   On Saturday, June 24, 2017 at 12:30:48 AM UTC-4, tai...@gmx.com wrote:
> 
>   
> Ah the smell of disinformation.
> 
> On 06/23/2017 10:28 AM, cooloutac wrote:
> 
> 
> 
>   On Thursday, June 22, 2017 at 6:51:27 PM UTC-4, tai...@gmx.com 
> wrote:
> 
>   
> On 06/21/2017 10:57 PM, cooloutac wrote:
> 
> 
> 
>   I agree they are super overpriced  But i'm not sure we can have 
> 100% libre hardware, at least not for desktops.  I heard the guy Chris from 
> thinkpenguin talk about on a radio show once,  how there is really only a 
> couple manufactures that dominate the world.  You would have to make every 
> single part from scratch.
> 
> I don't know anything about coreboot or libreboot. Though I know I'd actually 
> would like to have secure boot,  but I guess I'm crazy.
> 
> 
> 
> Of course you can, see the TALOS project for libre 
> hardware/firmware
> concepts and the KGPE-D16/KCMA-D8 for actual production libre firmware,
> there are some POWER computers as well.
> 
> If someone tells you otherwise they don't know what they are talking
> about, there is nothing stopping a company from making a libre computer
> even a small company as long as they have the cash, purism could have
> they just didn't want to.
> 
> Secure Boot is a marketing term for kernel code signing enforcement and
> grub already does this, MS "secure" (from you) boot is a way for them to
> eventually stop people from running linux.
> 
>   
>   I searched talos project and see stuff about body armor?
> 
> 
> The TALOS project from raptor engineering was a 100% libre firmware 
> and 
> hardware PC project that did not meet crowdfunding goals.
> 
> 
>   The guy from think penguin who sells libre laptops doesn't know 
> what he is  talking about? I agree he is a little extreme and paranoid,  but 
> The radio show was focused on wireless devices at the time and the dangers of 
> the fcc ruling to lock them,  and why purism, nor anybody, truly has a 100% 
> libre machine.  There is many firmwares integrated and attached to a mobo, 
> but you are acting as if there is only one.
> 
> 
> Thinkpenguin and system76 are good honest companies FYI, I would 
> suggest 
> supporting them if you are interested in a new intel machine for linux.
> He is not extreme nor paranoid, the fcc thing could mean the end of open 
> source linux drivers and firmware for wifi chips.
> 
> There is not "many firmwares attached to a mobo" there really is only 
> one most of the time, I know what I am talking about as I am involved in 
> the coreboot project and I own several libre firmware machines.
> The KGPE-D16 and KCMA-D8 have full functionality with libre firmware and 
> zero blobs, I even play the latest games on mine so that excuse from 
> purism that "oh no one has this" doesn't fly moreso because they haven't 
> even "struck a compromise for the latest hardware" or what not as again 
> their "coreboot" has entirely blobbed hw init making it pointless.
> 
> The exception to this rule would be a device with for example an 
> integrated storage device, FullMAC (not the SoftMAC AGN atheros types) 
> wireless chip, or a laptop/mobile board with an EC.
> 
> 
>   I don't know what you mean secure boot is a way to stop linux. It 
> is supported by all major linux distributions.  Even after that myth is 
> proven wrong you still perpetuate it?   Even after Richard Stallman himself 
> says its ok to use secure boot?
> 
> 
> "supported by all major linux distros"
> Only by using a red hat supplied signed binary pre-compiled sketchy 
> version of grub.
> I don't think I should need to ask red hat for permission to run linux 
> do you?
> A machine that lacks the ability to use even your own bootloader is not 
> really your machine you are simply licensing the use of it.
> 
> SB 1.0 specs require owner control and method to shut it off and enroll 
> own keys, SB 2.0 doesn't have this requirement so OEM's will eventually 
> not implement it similarly to MS's ARM computers that only allow you to 
> install windows - thus stopping people from using linux so no it isn't a 
> myth.
> 
> 
>   I don't believe grub2 can take the place of secure boot. WOuld it 
> have stopped hacking teams insyde bios exploit?   More to it then just the 
> kernel.  I believe you would sign the grub but then grub would also be 
> protected.  I mean what does grub have to do with the bios?
> 
> 
> Again secure boot is simply kernel signing nothing special.
> Grub2 on a coreboot device can perform the same function only it is 
> always owned controlled, most coreboot users use grub to load kernels 
> instead of loading a kernel directly from CBFS.
> 

[qubes-users] Announcement: Toward a Reasonably Secure Laptop

2017-07-08 Thread Andrew David Wong
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Dear Qubes Community,

It's no secret that hardware selection is one of the biggest hurdles Qubes
users face. Finding a computer that is secure, trustworthy, and compatible
is more difficult than it should be. In an effort to address the compatibility
aspect of that problem, we introduced the Qubes-certified laptop
program [1] back in 2015.

So far, only one laptop has been Qubes-certified: the Purism Librem 13v1.
A number of users purchased this laptop comfortable in the knowledge that it
would be compatible with Qubes, and it served them well in that regard.
However, the Librem 13v1 is no longer being manufactured, and the Librem 13v2
has not undergone Qubes-certification (nor has any other laptop yet). This
means that the need for compatible hardware is more pressing than ever.

It's important to remember that Qubes-certification is only about
*compatibility* -- not security, trustworthiness, or anything else. Being
Qubes-certified has always meant that a computer has been tested to
ensure that it runs Qubes OS well -- nothing more, nothing less. But we know
that security-conscious users care about more than just compatibility, which
is why we announced updated requirements for Qubes 4.x certification [2]
last year.

So far, no third-party manufacturers have produced a computer
that satisfies these requirements. However, ITL has entered initial talks with
a promising partner with whom we can foresee creating a true Reasonably Secure
Laptop. Our plan is to introduce a tier-based model of laptop support:

 - *Level 0: Qubes Compatible Laptop.* As with the Purism Librem 13v1, this
   will be a laptop that comes with no guarantees regarding security or
   trustworthiness. We'll guarantee only that the laptop is compatible with
   Qubes OS. In practice, a vendor who wishes to introduce a Level 0
   laptop will typically have to allow for specific choices regarding the GPU,
   Wi-Fi, and Bluetooth modules. The vendor will also have to be willing to
   "freeze" the configuration of the laptop for at least one year.

 - *Level 1: Qubes Certified Laptop.* In addition to meeting all the
   requirements of Level 0, this laptop will also have to conform to our
   updated requirements for Qubes 4.x certification [2].

 - *Level 2: Qubes Stateless Laptop.* For details about this, please see
   Joanna Rutkowska's paper State Considered Harmful [3]. We can foresee
   multiple levels of compatibility here. However, we expect that it will be at
   least two years before a true stateless laptop can be created. In the
   immediate future, therefore, we intend to pursue a Level 1 laptop.

Please note that laptops on the Qubes Hardware Compatibility List (HCL) [4]
do not have a specific level. This is because neither ITL nor the Qubes OS
Project makes any affirmations regarding the vast majority of laptops on this
list. Rather, the list is compiled from voluntary contributions from members
of the community like you!

This is just the beginning. There's a long road ahead before we can make
a Reasonably Secure Laptop a reality, but the need is too great to ignore.


[1] https://www.qubes-os.org/news/2015/12/09/purism-partnership/
[2] https://www.qubes-os.org/news/2016/07/21/new-hw-certification-for-q4/
[3] https://blog.invisiblethings.org/papers/2015/state_harmful.pdf
[4] https://www.qubes-os.org/hcl/


This post can be viewed on the Qubes website at:
https://www.qubes-os.org/news/2017/07/08/toward-a-reasonably-secure-laptop/

- -- 
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
-BEGIN PGP SIGNATURE-
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=O6e+
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/8f41ea93-4ca3-0b4d-2b5e-8ecb699e4d48%40qubes-os.org.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Qubes OS 4 pre RC1

2017-07-08 Thread 'P R' via qubes-users
Hello,

I tried to install Qubes 4 pre RC1 on my Lenovo Thinkpad W540.
I've seen some warning messages during the Boot process of the installation
stick but the installation process itself was working without any problems.
After ~15min Qubes was ready to reboot.

When I reboot, Qubes Boot Menu comes up, but when I hit enter, after
roughly 6 seconds a reboot happens.

I have also tried to remove rhgb quiet from the grub line, to get more
information, but I just get a black screen, then reboot.

Any idea where to look for the for cause.

- Philipp

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CAM8xnvKGDgDuns8PQ8OW8dQiOfNUdcwqFKQ%2BmQJFRMav9K4GeA%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Ubuntu Template

2017-07-08 Thread Unman
On Fri, Jul 07, 2017 at 08:42:46PM -0700, Michael MENG wrote:
> On Friday, June 30, 2017 at 6:59:25 AM UTC+8, Unman wrote:
> > On Wed, Jun 28, 2017 at 10:20:49PM -0700, Michael MENG wrote:
> > > Thank you so much for help, Unman, can you please give me step, i dont 
> > > know how to export PATH, because i am very new in linux and qubes. 
> > > 
> > The PR has been merged, so you just need to 'git pull' and 'make
> > get-sources' before you try another build.
> 
> yeah!!! Unman, Thank you so much, it's work, but do you know how to install 
> libre office to template? and how to show unbuntu desktop?
> 

Open a terminal in the Template.
Edit /etc/apt/sources.list (You can use emacs, vi or nano)
ADD Two lines:
deb http://archive.ubuntu.com xenial-security main universe multiverse 
restricted
deb http://archive.ubuntu.com xenial-updates main universe multiverse restricted
Close the file.
(I've just put in a PR to have these by default)

Then:
apt-get update
apt-get upgrade
apt-get install libreoffice

Alternatively, try using aptitude - it's a simple but very usable front
end to package management.
If you select libreoffice it will install all dependencies and all
office apps.
If you install ubuntu-desktop (apt-get install ubuntu-desktop), it will
install ALL the desktop applications, including libreoffice,
rhythmbox,nautilus etc etc. That's quite a bit - around 450 MB - but it
gives you a near complete Ubuntu desktop experience.

unman

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20170708215808.knmfoycpalpbqhi7%40thirdeyesecurity.org.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: Best Desktop for Qubes

2017-07-08 Thread Grzesiek Chodzicki
2017-07-08 21:55 GMT+02:00 Zbigniew Łukasiak :

> On Fri, Jul 7, 2017 at 9:27 AM, Grzesiek Chodzicki
>  wrote:
> > Highly depends on the use case and budget. SO, a few questions first:
> >  - Does it have to be prebuilt or do You want to build it yourself?
>
> Yeah - most the advices I get are about building my own. Looks like
> I'll end up doing that - even though I have not built my own system
> for something like 15 years and I would prefer to buy a ready made
> system.
>
>
> >  - Do you plan on using it for GPU-intensive tasks?
>
> No.
>
> >  - How much do you care about the looks/size/portability of your machine?
>
> A little.
>
> >  - DO you already own some PC components?
>
>
> >  - What's your budget?
>
> It is high enough to buy any high end workstation.
>
> Z.
>
Personally, I wouldn't risk X299 or Ryzen platforms. You can safely go with
Intel X99 and it should work out of the box. The question is, how beefy
does the workstation need to be? On X99 you can go as high as 128GB of ECC
RAM and up to 18 core Xeon.
Aside: please keep the qubes-users group cc'ed.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CAEWhQ4c67seDrin8%2B6YRsw2fNcjAgvuabRHFQep2%2BbTiYNgMAA%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] here is how to randomize mac address

2017-07-08 Thread Chris Laprise

On 07/08/2017 05:07 PM, Ausaf Rashid wrote:

I made a new net VM(named my new net VM) based on Debian 9 followed the
website and changed the configuration settings by putting that mac.conf
file in the location ( did this by opening Gedit from my net VM:"new net
VM" as root, writing the given codes and saving it at the given
location, this was the right method right? That is , to save that config
file from the " new net VM" vm)?

Then I changed the net VM of sys- firewall(that was the only one using
Sys-net VM, the default NetVM) to "my new net VM". Again is it the right
thing to do?

But now the problem is that I can't see any interface to connect to WiFi
( wireless network) although I am able to connect to Ethernet.

Note that I am able to use the old NetVM and the WiFi interface and WiFi
works properly. Also that when I checked it I found out that my "new net
VM" doesn't have Linux firmware installed.
If this helps.
Thank you a lot.


(Posting back to qubes-users.)

It sounds like you almost got it: The conf file is saved in the 
template, not the netVM. After you do that, shutdown both the template 
and the netVM, then re-start the netVM.


--

Chris Laprise, tas...@openmailbox.org
https://twitter.com/ttaskett
PGP: BEE2 20C5 356E 764A 73EB  4AB3 1DC4 D106 F07F 1886

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/f8b967d0-981b-2f6f-c16f-8a3fda001601%40openmailbox.org.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] qubes manager cli for bspwm/i3 users

2017-07-08 Thread truleeeeeed
Hi guys, tell me please, is there any qubes manager cli for bspwm/i3 users ?

Thanks.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/78fd83eb-3e93-4b22-848f-8ae257f210b2%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] BIOS check before Qubes installation

2017-07-08 Thread Chris Laprise

On 07/08/2017 12:16 PM, Max wrote:

Hello,
How to check if BIOS require digital signatures on BIOS firmware updates?



IIRC, a firmware setup menu that has an 'anti-rollback' protection 
setting (to prevent earlier firmware versions from being accepted) 
should have signature verification.


As of 2012 the UEFI spec did not require this feature. I believe this 
has changed since then -- you can look for such a requirement at 
http://www.uefi.org/specifications .


You will probably get a more definitive answer for this type of question 
if you ask the Coreboot and Libreboot communities, as they regularly 
deal with such protection measures.


--

Chris Laprise, tas...@openmailbox.org
https://twitter.com/ttaskett
PGP: BEE2 20C5 356E 764A 73EB  4AB3 1DC4 D106 F07F 1886

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/031665fa-4269-5dba-e7b1-ac23265d758b%40openmailbox.org.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] BIOS check before Qubes installation

2017-07-08 Thread Max

  


  
  
Hello,
  How to check if BIOS require digital signatures on BIOS firmware
  updates?

  



-- 
You received this message because you are subscribed to the Google Groups "qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/1861871499530607%40web55j.yandex.ru.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Qubes installation without exposing to USB controllers

2017-07-08 Thread Max Tegare
I suppose that, before Qubes installation you may disable USB controllers in BIOS and check it on any Linux distribution typing lspci or on Windows in device manager. After installation you must add "rd.qubes.hide_all_usb" option and after that enable USB controllers in BIOS.



-- 
You received this message because you are subscribed to the Google Groups "qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/61951499423425%40web55j.yandex.ru.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Seeking a Localization Team co-leader

2017-07-08 Thread 'P R' via qubes-users
Hello Andrew,

Unfortunately I am not gifted with programming skills, if I can help with
localization (english -> german) I am happy to help.

- PhR


Am 08.07.2017 7:12 nachm. schrieb "Andrew David Wong" :

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Dear Qubes Community,

We're looking for someone to join Tobias  as
co-leader of the Qubes localization team. If you're interested in this
position, please let us know.

You can learn more about our ongoing localization efforts from these
sources:

https://www.transifex.com/otf/qubes/
https://github.com/QubesOS/qubes-issues/issues/2824
https://github.com/QubesOS/qubes-issues/issues/2652
https://github.com/QubesOS/qubes-issues/issues/1452
https://github.com/QubesOS/qubes-issues/issues/2599
https://github.com/QubesOS/qubes-issues/issues/1333

Please feel free to reply to this thread with any questions, and
Tobias will be happy to answer them.

Best,
Andrew

- --
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
-BEGIN PGP SIGNATURE-
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=SRKS
-END PGP SIGNATURE-

--
You received this message because you are subscribed to the Google Groups
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/
msgid/qubes-users/66fc3701-ad2f-102a-357c-8af478b25595%40qubes-os.org.
For more options, visit https://groups.google.com/d/optout.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CAM8xnvJ1cs-_haMunWUbD5%3D%2BJYX2HX%3DFB_MkcBu%2B6EAnU3LWRQ%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Seeking a Localization Team co-leader

2017-07-08 Thread Andrew David Wong
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Dear Qubes Community,

We're looking for someone to join Tobias  as
co-leader of the Qubes localization team. If you're interested in this
position, please let us know.

You can learn more about our ongoing localization efforts from these
sources:

https://www.transifex.com/otf/qubes/
https://github.com/QubesOS/qubes-issues/issues/2824
https://github.com/QubesOS/qubes-issues/issues/2652
https://github.com/QubesOS/qubes-issues/issues/1452
https://github.com/QubesOS/qubes-issues/issues/2599
https://github.com/QubesOS/qubes-issues/issues/1333

Please feel free to reply to this thread with any questions, and
Tobias will be happy to answer them.

Best,
Andrew

- -- 
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
-BEGIN PGP SIGNATURE-

iQIcBAEBCgAGBQJZYRJuAAoJENtN07w5UDAwGkIP/iWXU61Ikmh6ydqb6so5ThTl
5anynmVRJ9R1vzipKZEOVV5+Dpxejxih91ZH8Ap0M5Xk5/ADhFS2z+sIeELB5HiM
qb1VjfWsI4S8ax5Bf97ZmeiwWS/w+K21ahGt6f8/kbR0Y2bVEuOlbvXfs37Jvu+B
aWv2F9KsfF3l8Um5T9IEY13KnrXSKmWPdvkhcQt7YribinEmo7epRktGaghPnW5t
/dq3tEnkqIVna1hWJ6/jE5zGkeQT0Pq/gsI8FzpejC9ONBocmlMwsW9IfHe0KCmw
Ykz9eVVAOiaKwA0rOk97x6bCNtraVwbDAjnTBzau14d+UVVuE9lZM0zM3ZYxg3A2
UiOUQUkuuUUt3RecewmLRkRnNY0YRlx9Puc1uUIa9S/kbkGMw+5lwWZVy8jFN27G
n6eIcAuENDgpZxD9i1BO+NuPt3l51kjfT/0XxW90W7bAeeHUzluYz2041eYjWQxj
w4Iz+oG1DvZwhSIfCYS+PkU1LqOwekk87kZksQUV29El7sMaAWyM/G8ffqsSsXME
IXTaQMKS9lcqGpdxLbBoE6S8i7IANguQqso+TRawSsrJni9yxPVClVMX/M8CQZy/
uA1lEmfgUXGpxBRjHjrlqyuEFCJUUFiE2GswN9v5NGy3mKaGNGInU65ltm0Z0Qq/
1PpbBjjwNA6qpig0f4ua
=SRKS
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/66fc3701-ad2f-102a-357c-8af478b25595%40qubes-os.org.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] "No Applications Found" on dom0 start menu

2017-07-08 Thread taii...@gmx.com
For some reason I am getting "No applications found" on dom0's start 
menu (ie: no "vm manager" and preferences shortcuts)


Does anyone know how to fix it? Thanks

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/b65e1ef4-b915-c504-af22-84fa5137b10c%40gmx.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: certified laptop delivery to Russia

2017-07-08 Thread taii...@gmx.com

On 06/26/2017 10:41 AM, cooloutac wrote:


On Saturday, June 24, 2017 at 12:30:48 AM UTC-4,tai...@gmx.com  wrote:

Ah the smell of disinformation.

On 06/23/2017 10:28 AM, cooloutac wrote:


On Thursday, June 22, 2017 at 6:51:27 PM UTC-4,tai...@gmx.com  wrote:

On 06/21/2017 10:57 PM, cooloutac wrote:


I agree they are super overpriced  But i'm not sure we can have 100% libre 
hardware, at least not for desktops.  I heard the guy Chris from thinkpenguin 
talk about on a radio show once,  how there is really only a couple 
manufactures that dominate the world.  You would have to make every single part 
from scratch.

I don't know anything about coreboot or libreboot. Though I know I'd actually 
would like to have secure boot,  but I guess I'm crazy.


Of course you can, see the TALOS project for libre hardware/firmware
concepts and the KGPE-D16/KCMA-D8 for actual production libre firmware,
there are some POWER computers as well.

If someone tells you otherwise they don't know what they are talking
about, there is nothing stopping a company from making a libre computer
even a small company as long as they have the cash, purism could have
they just didn't want to.

Secure Boot is a marketing term for kernel code signing enforcement and
grub already does this, MS "secure" (from you) boot is a way for them to
eventually stop people from running linux.

I searched talos project and see stuff about body armor?

The TALOS project from raptor engineering was a 100% libre firmware and
hardware PC project that did not meet crowdfunding goals.

The guy from think penguin who sells libre laptops doesn't know what he is  
talking about? I agree he is a little extreme and paranoid,  but The radio show 
was focused on wireless devices at the time and the dangers of the fcc ruling 
to lock them,  and why purism, nor anybody, truly has a 100% libre machine.  
There is many firmwares integrated and attached to a mobo, but you are acting 
as if there is only one.

Thinkpenguin and system76 are good honest companies FYI, I would suggest
supporting them if you are interested in a new intel machine for linux.
He is not extreme nor paranoid, the fcc thing could mean the end of open
source linux drivers and firmware for wifi chips.

There is not "many firmwares attached to a mobo" there really is only
one most of the time, I know what I am talking about as I am involved in
the coreboot project and I own several libre firmware machines.
The KGPE-D16 and KCMA-D8 have full functionality with libre firmware and
zero blobs, I even play the latest games on mine so that excuse from
purism that "oh no one has this" doesn't fly moreso because they haven't
even "struck a compromise for the latest hardware" or what not as again
their "coreboot" has entirely blobbed hw init making it pointless.

The exception to this rule would be a device with for example an
integrated storage device, FullMAC (not the SoftMAC AGN atheros types)
wireless chip, or a laptop/mobile board with an EC.

I don't know what you mean secure boot is a way to stop linux. It is supported 
by all major linux distributions.  Even after that myth is proven wrong you 
still perpetuate it?   Even after Richard Stallman himself says its ok to use 
secure boot?

"supported by all major linux distros"
Only by using a red hat supplied signed binary pre-compiled sketchy
version of grub.
I don't think I should need to ask red hat for permission to run linux
do you?
A machine that lacks the ability to use even your own bootloader is not
really your machine you are simply licensing the use of it.

SB 1.0 specs require owner control and method to shut it off and enroll
own keys, SB 2.0 doesn't have this requirement so OEM's will eventually
not implement it similarly to MS's ARM computers that only allow you to
install windows - thus stopping people from using linux so no it isn't a
myth.

I don't believe grub2 can take the place of secure boot. WOuld it have stopped 
hacking teams insyde bios exploit?   More to it then just the kernel.  I 
believe you would sign the grub but then grub would also be protected.  I mean 
what does grub have to do with the bios?

Again secure boot is simply kernel signing nothing special.
Grub2 on a coreboot device can perform the same function only it is
always owned controlled, most coreboot users use grub to load kernels
instead of loading a kernel directly from CBFS.

HT's exploit of crappy proprietary BIOS's would work on a "secure" boot
or otherwise machine.


If you want a 100% libre computer,you will have to manufacture every single 
chip on the mobo yourself.

[citation needed]
Again that is purism propaganda that simply isn't true - again see
raptor engineerings TALOS project as a proof of concept, it was already
ready to go they just had to fab the boards.

Because there is literally only maybe 2 or 3 companies who manufacture 
certain parts for a mobo in all of the world.

[citation needed]
If you were a hardware engineer you would know 

[qubes-users] Re: Qubes 4 Fails to Boot With Coreboot

2017-07-08 Thread Andrew Morgan
On 07/07/2017 10:20 AM, 'Protonmij' via qubes-users wrote:
> As recommended by Qubes, I have installed Coreboot on my X230 - which
> successfully runs Debian, Tails etc. I've tried to run Qubes 3.2 but
> although the Installer process works OK, Qubes refuses to boot [hangs].
> From what I can gather, its a Zen issue that's preventing the boot.
> I had hoped the issue would be resolved in Qubes 4. However, I've been
> disappointed - I get exactly the same symptoms having downloaded the
> trial version from
> https://ftp.qubes-os.org/~marmarek/Qubes-DVD-x86_64-20170706.iso
> 
> Is this an isolated example or is there a wider problem with Coreboot
> and Qubes?
> 
> 
> Sent with ProtonMail  Secure Email.
> 
> -- 
> You received this message because you are subscribed to the Google
> Groups "qubes-users" group.
> To unsubscribe from this group and stop receiving emails from it, send
> an email to
> qubes-users+unsubscr...@googlegroups.com
> .
> To post to this group, send email to
> qubes-users@googlegroups.com
> .
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/qubes-users/MGEZpVt6pYIaYOxOT7U0emGldUOgkz521w70eU6KKu_oqgrtrhNn6YMBoLabZmKIGBYpnoxU-7nRlIjC82QZf6VP4FIKzAYo_Bu017uqq4Q%3D%40protonmail.com
> .
> For more options, visit https://groups.google.com/d/optout.

Can you provide any more details about at what point in the boot process
it hangs? It's hard to suggest anything to try based on the current
description.

Does it reach the Qubes loader-bar screen or do you just get a black
screen while booting?

I believe you can press ESC in the Qubes-logo booting process to show
more detailed information, as well as removing the 'quiet' entry in the
kernel arguments on boot (you can do this by pressing 'e' at the
grub/bootup screen, press right arrow-key to see the rest of the arguments).

Andrew Morgan

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/ojqvl2%242fd%241%40blaine.gmane.org.
For more options, visit https://groups.google.com/d/optout.


signature.asc
Description: OpenPGP digital signature


[qubes-users] Re: Setup Fails to Install netvm, firewallvm, work, personal, etc - Fedora 23 Error

2017-07-08 Thread ankittiwari199721211
 Uninstall the software which you installed lately.
Run SmartPCFixer, choose System Tools, and click Uninstaller, then choose the 
application you have just installed.Update your Windows 8 to the latest version.
For windows 7 users:
Click Start, and search windows update 
System restore is always the best way to fix common computer errors.
Check Lenovo P70 Manual- 
https://guideusermanual.com/product-name-p70-a-smartphone-manual=331753=English
 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/4ca4d875-9735-4b8f-8913-48013e888e47%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Qubes silently ditches Librem

2017-07-08 Thread baldric
For those of us who followed Qubes hardware recommendations and then bought or 
ordered shiny new Librem 13 laptops, you'll maybe not have noticed  that qubes 
has silently and sneakily withdrawn the recommendation leaving us all in the 
lurch.
Originally qubes was sold to as all as a reasonably secure OS - that security 
they said was built around the trusted ZEN platform. We now know that Zen has 
numerous security vulnerabilities
How can we trust Qubes judgement anymore? I certainly don't.


--
Securely sent with Tutanota. Claim your encrypted mailbox today!
https://tutanota.com

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/KoW49kR--3-0%40tutanota.com.
For more options, visit https://groups.google.com/d/optout.