[qubes-users] Re: Qubes 4.0-rc2 networking issues
JPL: > I just installed RC2 for the first time, ticking the 'enable Tor' box corresponding to the Whonix template. After booting and connecting to WiFi I was surprised to note that the Whonix Gateway started with the 'connecting to Tor' dialog when I started the Fedora-25 template to update it. So it seems everything was being routed through Tor even though I was not using Whonix. > Hi JPL! How about trying this: On the Qubes VM Manager find Fedora-25 template -> right click on that and select VM settings -> Change the NetVM from sys-whonix (or any other Whonix-gateway VM) to sys-firewall -> click OK > I tried changing the networking options in the sys-net and firewall VMs but that simply dropped the connection. I then tried to reset again and got an error message saying the VM settings could not be changed. > > Can someone tell me the default settings for the sys-net and firewall VMs? I only want Whonix to route through Tor. Hopefully I wont have to reinstall it again. Thanks. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/otrgjh%24r61%241%40blaine.gmane.org. For more options, visit https://groups.google.com/d/optout. 0x6DCDD53C.asc Description: application/pgp-keys signature.asc Description: OpenPGP digital signature
[qubes-users] Upgrading from rc2 to release.
Is this just a case of running a Dom0 update? Or would I have to manually install the stable release? FYI: I'm still on 3.2. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/b4d12e6d-43c3-48e9-80b1-c2b12f2a3b80%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Rise up . Net
Regarding using a google account for these lists, it's something I do strictly on googlegroups mailing lists. I don't see a point of having my "real" mailboxes spammed just to have all my data processed by google anyway. I could use an alternative e-mail just for the sake of incentive other people to do it too, but I have other means of express my political statements on that which I find better, and even if no one used google accounts here, we're still stuck in a google mailing list anyway. -- iuri.neocities.org -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/CAF0bz4SD_Fq1%2Bss4Q3%2B3Fw-AtCMhGJ4YSk23Of%3Dzfh8U1y%2Be_Q%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Rise up . Net
According to the Riseup terms, riseup users are supposed to send invites to people we know and trust. If there is a riseup person in this list (and I think there is), you could even get your account suspended and the person who gave you an invite, too. I take it that this list is actually one of the best places in the internet to ask such a thing, because this reply I'm giving you it's a rare thing out there. But looking at what are you trying to do, you don't need a red riseup account. You may use a green account which doesn't require an invite. You can for example start a mailing list - lists.riseup.net which will use the e-mail accounts you group is already using, including gmx/gmail/etc. and that is a problem, the involved people should start gradually using a different account - that's my personal opinion, I've found that for most people it's better to change their habits at their own pace than to radically change everything overnight. The main issue solved with a mailing list is that you can conceal the subscribers, and therefore they can't be connected, even if there's a subscriber spying the message content. If people can respond to the messages, then their addresses will be revealed only for subscribers. You can even have an open public list which reveals every message and every subscriber like googlegroups, there's a lot of flexibility. Other tool you may use is the crabgrass social network at we.riseup.net - that one doesn't even require an e-mail account, and it have most features you would expect from a production suite / social interaction / group work framework for non tech people. There is more you can do without a red riseup account, look for "other services" with the green star in the main site. -- iuri.neocities.org -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/CAF0bz4RibJeJy97hKVbWsk9atR1Wat9dEnnSW7rw3FjGJBas7A%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Rise up . Net
On 11/06/2017 05:17 PM, aimeejori...@gmail.com wrote: I am trying to establish a secure connection woth riseup as a platform to organize, and communicate with a group of people but i have no invite code. If anybody is awesome enough to send me one, i would be very grateful I take it all of you haven't read the wikipedia article on them... Irregardless they're a lot better than gmail which everyone in this list loves for some reason - the standard oil of technology gets a free pass from all the bad shit they do as they have a rumpus room and brightly colored office furniture. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/0e5a84cf-3cc1-1f0a-87fd-59c69038df67%40gmx.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Re: R3.2 Upgrading Fedora 25 --> 26 templates - PulseAudio issue
On 2017-11-05 22:14, Others call me jean wrote: > +1 > > if possible a rawhide repository too (for latest package updates -> > security reason) > > On 11/05/2017 11:00 PM, J. Eppler wrote: >> I would be interested in Fedora 26 or even better 27 in R3.2 as well. >> >> Best regards >> J. Eppler >> Well, there are Fedora 26 templates https://ftp.qubes-os.org/repo/yum/r3.2/current/vm/ However, I'm still stuck with this PulseAudio issue... -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/dd2eccdb450892e36920a67a4eae6261%40riseup.net. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Rise up . Net
I am trying to establish a secure connection woth riseup as a platform to organize, and communicate with a group of people but i have no invite code. If anybody is awesome enough to send me one, i would be very grateful -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/72540a90-b81f-4459-ae0a-18a1deef860e%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Qubes 4.0-rc2 networking issues
I just installed RC2 for the first time, ticking the 'enable Tor' box corresponding to the Whonix template. After booting and connecting to WiFi I was surprised to note that the Whonix Gateway started with the 'connecting to Tor' dialog when I started the Fedora-25 template to update it. So it seems everything was being routed through Tor even though I was not using Whonix. I tried changing the networking options in the sys-net and firewall VMs but that simply dropped the connection. I then tried to reset again and got an error message saying the VM settings could not be changed. Can someone tell me the default settings for the sys-net and firewall VMs? I only want Whonix to route through Tor. Hopefully I wont have to reinstall it again. Thanks. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/a6b1e4d0-5fa2-4c2d-af6f-3b9102356813%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Mainboard buying advice :: Should we still avoid mainboards with Intel vPro ??
> > I'm really glad the 63xx CPUs are also supported by Coreboot. I don't > > really mind about Libreboot' philosophical issues - if it works on Coreboot > > I'm happy. And now as I have checked the Coreboot Wiki page again I > > actually realized you openly state the 63xx series works fine ;) > The FSF hard line stance is a good thing, which gets us stuff like TALOS > 2/POWER9 which is 100% owner controlled including microcode (check it out) > But in this case I say the faster cpu is worth it for video games. Yes I've had a look, TALOS II is definitely a great project! Unfortunately, my budget doesn't really allow to spend 5-6k on a workstation. Nontheless, I really appreciate their efforts and can imagine privacy/security-conscious companies do so as well. I don't even think it's that expensive, given that they have to do a lot of development/research and probably only manufacture in relatively small quantities (yet). > > Is that all it takes to compile the .rom correctly ? Does SeaBios work > > out-of-the-box with Qubes ? Also, would it be best to simply clone the > > latest working config for the KGPE-D16 from the Coreboot website > > (https://www.coreboot.org/Supported_Motherboards), which can be downloaded > > here for example: > > > > - > > https://review.coreboot.org/cgit/coreboot.git/commit/?id=3f09b0ffef990286ecca344cf73023b35be42406 > > - > > https://review.coreboot.org/cgit/board-status.git/tree/asus/kgpe-d16/4.6-1125-g3f09b0f/2017-08-21T04_40_02Z/config.txt > That should be what was included, no need to do that. Yes true, I just thought I might reverse-engineer the correct settings for the KGPE-D16 from that config.txt file. Now as I have learned that the default settings are fine, that idea doesn't really make sense anymore. I initially expected each motherboard/chipset would require a custom setup to work. (Besides specifying motherboard/chipset). > > Would you generally agree, that "Microcode update" is just a fancy name for > > fetching + installing a certain AMD package from a repository that patches > > the security vulnerability in the CPU? Or what is the approach I need to > > follow to enable IOMMU and fix the security vulnerability when running a > > 63xx CPU under Qubes/Xen? > You need it in the firmware to enable IOMMU and avoid the NMI issue, by > default coreboot includes it as I said so no worries. (check just to > make sure of course) Okay fine, I'll simply go with Coreboot default settings then. > > Yes it's really crazy and a bit alarming how much data they gather :/ > > That's also the main reason why I want to keep my browsing in different VMs > > (work, banking, music/streaming, etc). > That doesn't do anything if you use an identical browser fingerprint. Seems I really need to learn a bit more about this as soon as Qubes OS is up and running. I thought if I separate the cookies and use an adblock addon in Firefox I'd avoid most of those tracking problems. > > I mean know one knows, what they will really do with all the personal > > data in the future. > Being denied a job because your politics differ from your bosses - > removing 50% of job options. > Having creepy people scan your face in public and then harrass you for > whatever reason. > Someone robbing your house because statistically they can get away with > it at exactly that time (their robber research tool told them what the > best time was to rob you: when you are far from home, when the local > cops take a donut break, when your neighbors are otherwise occupied, etc) Scary stuff, but very likely if I think about it! I once also read that insurance companies increasingly attempt to track/profile people (and their habits) on social media to determine insurance premiums. In other words, sometime in the future your insurance premium could depend on what you post/share online (or what not). Can't believe all those things are legal. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/cc93e841-6fda-416a-9ac7-0e0d766ae46e%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Acer Aspire E 15
On Friday, September 15, 2017 at 1:39:17 AM UTC-4, tai...@gmx.com wrote: > On 09/14/2017 11:47 PM, Feral-Fractals7 wrote: > > Thank you for this. After a bit of research I've decided to purchase the > > T430. > > > Excellent choice, let me know if you need help installing coreboot or if > you have any more questions - there is a how to guide on the coreboot > wiki as well. > > You will need: > USB CH341A - around $10 (this also supports DIP8 for that libre kcma-d8 > in your future) > SOIC-8 Test clip with cable (make sure to get one that comes with a > cable) around $10-20 > > Notes: > Remember to properly orient the clip according to the various diagrams > so that you don't short anything out (there is a little circle on the > soic8 chip and the ch341a that needs to match on both ends of the cable) > > If you want a new keyboard I would get the T420 keyboard and palmrest as > it is slightly nicer (I don't like chiclet keyboards) > > You can play video games in a VM on this with an ExpressCard eGPU setup > and IOMMU-GFX > > I recommend buying a docking station if you have a lot of peripherals at > home. > > There are a lot of counterfeit batteries and charging cords out there, > so be careful you get the real thing if you wish to get another battery > or a charging cord for the dock if it doesn't come with one. I already have the Acer Aspire E15 and discovered I can't download Google Docs. I normally access Google Docs through Firefox, but wanted offline capability. Is there a solution for me? (I replied this question to the original poster before I figured out how replying to one comment works. I have very, very little tech savvy.) -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/370b1dbb-b82e-41ee-9e35-0cc1086688f3%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Re: Acer Aspire E 15
On Thursday, September 14, 2017 at 7:39:44 AM UTC-4, Feral-Fractals7 wrote: > Hello. I am in the market for a laptop that works with Qubes. I am aware of > the Hardware compatibility list, however I did not see the Acer Aspire E 15 > there. It uses the Core i3-7100U, which according to the site show it has > VT-d and VT-x tech. Does this mean the main functions of Qubes will work > without error? For those who answered this question: I already have the Acer Aspire E15 and discovered I am unable to download Google docs. I usually just use it through Firefox, but was hoping for offline capability. I have practically ZERO capability to understand technical jargon. Is there a solution for me? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/be86afb8-e5d8-48b1-902f-35f9e5942aa3%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Re: Coreboot VS Libreboot :: Which is better for Qubes OS ?
Intel sucks. You can read about this on https://www.networkworld.com/article/3236064/servers/minix-the-most-popular-os-in-the-world-thanks-to-intel.html -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/2144a6f3-92ad-4e1c-aa90-07d71aae652b%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.