[qubes-users] Re: Qubes 4.0-rc2 networking issues

2017-11-06 Thread iry
JPL:
> I just installed RC2 for the first time, ticking the 'enable Tor' box
corresponding to the Whonix template. After booting and connecting to
WiFi I was surprised to note that the Whonix Gateway started with the
'connecting to Tor' dialog when I started the Fedora-25 template to
update it. So it seems everything was being routed through Tor even
though I was not using Whonix.
>
Hi JPL!

How about trying this:

On the Qubes VM Manager find Fedora-25 template -> right click on that
and select VM settings -> Change the NetVM from sys-whonix (or any other
Whonix-gateway VM) to sys-firewall -> click OK

> I tried changing the networking options in the sys-net and firewall
VMs but that simply dropped the connection. I then tried to reset again
and got an error message saying the VM settings could not be changed.
>
> Can someone tell me the default settings for the sys-net and firewall
VMs? I only want Whonix to route through Tor. Hopefully I wont have to
reinstall it again. Thanks.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/otrgjh%24r61%241%40blaine.gmane.org.
For more options, visit https://groups.google.com/d/optout.


0x6DCDD53C.asc
Description: application/pgp-keys


signature.asc
Description: OpenPGP digital signature


[qubes-users] Upgrading from rc2 to release.

2017-11-06 Thread jkitt
Is this just a case of running a Dom0 update? Or would I have to manually 
install the stable release?

FYI: I'm still on 3.2.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/b4d12e6d-43c3-48e9-80b1-c2b12f2a3b80%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Rise up . Net

2017-11-06 Thread Desobediente
Regarding using a google account for these lists, it's something I do
strictly on googlegroups mailing lists. I don't see a point of having my
"real" mailboxes spammed just to have all my data processed by google
anyway. I could use an alternative e-mail just for the sake of incentive
other people to do it too, but I have other means of express my political
statements on that which I find better, and even if no one used google
accounts here, we're still stuck in a google mailing list anyway.

-- 
iuri.neocities.org

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CAF0bz4SD_Fq1%2Bss4Q3%2B3Fw-AtCMhGJ4YSk23Of%3Dzfh8U1y%2Be_Q%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Rise up . Net

2017-11-06 Thread Desobediente
According to the Riseup terms, riseup users are supposed to send invites to
people we know and trust. If there is a riseup person in this list (and I
think there is), you could even get your account suspended and the person
who gave you an invite, too. I take it that this list is actually one of
the best places in the internet to ask such a thing, because this reply I'm
giving you it's a rare thing out there.

But looking at what are you trying to do, you don't need a red riseup
account. You may use a green account which doesn't require an invite.

You can for example start a mailing list - lists.riseup.net which will use
the e-mail accounts you group is already using, including gmx/gmail/etc.
and that is a problem, the involved people should start gradually using a
different account - that's my personal opinion, I've found that for most
people it's better to change their habits at  their own pace than to
radically change everything overnight.
The main issue solved with a mailing list is that you can conceal the
subscribers, and therefore they can't be connected, even if there's a
subscriber spying the message content. If people can respond to the
messages, then their addresses will be revealed only for subscribers. You
can even have an open public list which reveals every message and every
subscriber like googlegroups, there's a lot of flexibility.

Other tool you may use is the crabgrass social network at we.riseup.net -
that one doesn't even require an e-mail account, and it have most features
you would expect from a production suite / social interaction / group work
framework for non tech people.

There is more you can do without a red riseup account, look for "other
services" with the green star in the main site.

-- 
iuri.neocities.org

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CAF0bz4RibJeJy97hKVbWsk9atR1Wat9dEnnSW7rw3FjGJBas7A%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Rise up . Net

2017-11-06 Thread taii...@gmx.com

On 11/06/2017 05:17 PM, aimeejori...@gmail.com wrote:


I am trying to establish a secure connection woth riseup as a platform to 
organize, and communicate with a group of people but i have no invite code. If 
anybody is awesome enough to send me one, i would be very grateful


I take it all of you haven't read the wikipedia article on them...

Irregardless they're a lot better than gmail which everyone in this list 
loves for some reason - the standard oil of technology gets a free pass 
from all the bad shit they do as they have a rumpus room and brightly 
colored office furniture.


--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/0e5a84cf-3cc1-1f0a-87fd-59c69038df67%40gmx.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: R3.2 Upgrading Fedora 25 --> 26 templates - PulseAudio issue

2017-11-06 Thread Gaijin
On 2017-11-05 22:14, Others call me jean wrote:
> +1
> 
> if possible a rawhide repository too (for latest package updates ->
> security reason)
> 
> On 11/05/2017 11:00 PM, J. Eppler wrote:
>> I would be interested in Fedora 26 or even better 27 in R3.2 as well.
>>
>> Best regards
>>   J. Eppler
>>

Well, there are Fedora 26 templates
https://ftp.qubes-os.org/repo/yum/r3.2/current/vm/
However, I'm still stuck with this PulseAudio issue...

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/dd2eccdb450892e36920a67a4eae6261%40riseup.net.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Rise up . Net

2017-11-06 Thread aimeejorider
I am trying to establish a secure connection woth riseup as a platform to 
organize, and communicate with a group of people but i have no invite code. If 
anybody is awesome enough to send me one, i would be very grateful

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/72540a90-b81f-4459-ae0a-18a1deef860e%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Qubes 4.0-rc2 networking issues

2017-11-06 Thread JPL
I just installed RC2 for the first time, ticking the 'enable Tor' box 
corresponding to the Whonix template. After booting and connecting to WiFi I 
was surprised to note that the Whonix Gateway started with the 'connecting to 
Tor' dialog when I started the Fedora-25 template to update it. So it seems 
everything was being routed through Tor even though I was not using Whonix. 

I tried changing the networking options in the sys-net and firewall VMs but 
that simply dropped the connection. I then tried to reset again and got an 
error message saying the VM settings could not be changed.

Can someone tell me the default settings for the sys-net and firewall VMs? I 
only want Whonix to route through Tor. Hopefully I wont have to reinstall it 
again. Thanks.

  

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/a6b1e4d0-5fa2-4c2d-af6f-3b9102356813%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Mainboard buying advice :: Should we still avoid mainboards with Intel vPro ??

2017-11-06 Thread 'Marek Jenkins' via qubes-users
> > I'm really glad the 63xx CPUs are also supported by Coreboot. I don't 
> > really mind about Libreboot' philosophical issues - if it works on Coreboot 
> > I'm happy. And now as I have checked the Coreboot Wiki page again I 
> > actually realized you openly state the 63xx series works fine ;)
> The FSF hard line stance is a good thing, which gets us stuff like TALOS 
> 2/POWER9 which is 100% owner controlled including microcode (check it out)
> But in this case I say the faster cpu is worth it for video games.

Yes I've had a look, TALOS II is definitely a great project! Unfortunately, my 
budget doesn't really allow to spend 5-6k on a workstation. Nontheless, I 
really appreciate their efforts and can imagine privacy/security-conscious 
companies do so as well. I don't even think it's that expensive, given that 
they have to do a lot of development/research and probably only manufacture in 
relatively small quantities (yet).

> > Is that all it takes to compile the .rom correctly ? Does SeaBios work 
> > out-of-the-box with Qubes ? Also, would it be best to simply clone the 
> > latest working config for the KGPE-D16 from the Coreboot website 
> > (https://www.coreboot.org/Supported_Motherboards), which can be downloaded 
> > here for example:
> >
> > - 
> > https://review.coreboot.org/cgit/coreboot.git/commit/?id=3f09b0ffef990286ecca344cf73023b35be42406
> > - 
> > https://review.coreboot.org/cgit/board-status.git/tree/asus/kgpe-d16/4.6-1125-g3f09b0f/2017-08-21T04_40_02Z/config.txt
> That should be what was included, no need to do that.

Yes true, I just thought I might reverse-engineer the correct settings for the 
KGPE-D16 from that config.txt file. Now as I have learned that the default 
settings are fine, that idea doesn't really make sense anymore. I initially 
expected each motherboard/chipset would require a custom setup to work. 
(Besides specifying motherboard/chipset).

> > Would you generally agree, that "Microcode update" is just a fancy name for 
> > fetching + installing a certain AMD package from a repository that patches 
> > the security vulnerability in the CPU? Or what is the approach I need to 
> > follow to enable IOMMU and fix the security vulnerability when running a 
> > 63xx CPU under Qubes/Xen?
> You need it in the firmware to enable IOMMU and avoid the NMI issue, by 
> default coreboot includes it as I said so no worries. (check just to 
> make sure of course)

Okay fine, I'll simply go with Coreboot default settings then.

> > Yes it's really crazy and a bit alarming how much data they gather :/ 
> > That's also the main reason why I want to keep my browsing in different VMs 
> > (work, banking, music/streaming, etc).
> That doesn't do anything if you use an identical browser fingerprint.

Seems I really need to learn a bit more about this as soon as Qubes OS is up 
and running. I thought if I separate the cookies and use an adblock addon in 
Firefox I'd avoid most of those tracking problems.

> >   I mean know one knows, what they will really do with all the personal 
> > data in the future.
> Being denied a job because your politics differ from your bosses - 
> removing 50% of job options.
> Having creepy people scan your face in public and then harrass you for 
> whatever reason.
> Someone robbing your house because statistically they can get away with 
> it at exactly that time (their robber research tool told them what the 
> best time was to rob you: when you are far from home, when the local 
> cops take a donut break, when your neighbors are otherwise occupied, etc)

Scary stuff, but very likely if I think about it! I once also read that 
insurance companies increasingly attempt to track/profile people (and their 
habits) on social media to determine insurance premiums. In other words, 
sometime in the future your insurance premium could depend on what you 
post/share online (or what not). Can't believe all those things are legal.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/cc93e841-6fda-416a-9ac7-0e0d766ae46e%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Acer Aspire E 15

2017-11-06 Thread michelewpropst
On Friday, September 15, 2017 at 1:39:17 AM UTC-4, tai...@gmx.com wrote:
> On 09/14/2017 11:47 PM, Feral-Fractals7 wrote:
> > Thank you for this. After a bit of research I've decided to purchase the 
> > T430.
> >
> Excellent choice, let me know if you need help installing coreboot or if 
> you have any more questions - there is a how to guide on the coreboot 
> wiki as well.
> 
> You will need:
> USB CH341A - around $10 (this also supports DIP8 for that libre kcma-d8 
> in your future)
> SOIC-8 Test clip with cable (make sure to get one that comes with a 
> cable) around $10-20
> 
> Notes:
> Remember to properly orient the clip according to the various diagrams 
> so that you don't short anything out (there is a little circle on the 
> soic8 chip and the ch341a that needs to match on both ends of the cable)
> 
> If you want a new keyboard I would get the T420 keyboard and palmrest as 
> it is slightly nicer (I don't like chiclet keyboards)
> 
> You can play video games in a VM on this with an ExpressCard eGPU setup 
> and IOMMU-GFX
> 
> I recommend buying a docking station if you have a lot of peripherals at 
> home.
> 
> There are a lot of counterfeit batteries and charging cords out there, 
> so be careful you get the real thing if you wish to get another battery 
> or a charging cord for the dock if it doesn't come with one.

I already have the Acer Aspire E15 and discovered I can't download Google Docs. 
I normally access Google Docs through Firefox, but wanted offline capability.  
Is there a solution for me? (I replied this question to the original poster 
before I figured out how replying to one comment works. I have very, very 
little tech savvy.)

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/370b1dbb-b82e-41ee-9e35-0cc1086688f3%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Acer Aspire E 15

2017-11-06 Thread michelewpropst
On Thursday, September 14, 2017 at 7:39:44 AM UTC-4, Feral-Fractals7 wrote:
> Hello. I am in the market for a laptop that works with Qubes. I am aware of 
> the Hardware compatibility list, however I did not see the Acer Aspire E 15 
> there. It uses the Core i3-7100U, which according to the site show it has 
> VT-d and VT-x tech. Does this mean the main functions of Qubes will work 
> without error?

For those who answered this question: I already have the Acer Aspire E15 and 
discovered I am unable to download Google docs. I usually just use it through 
Firefox, but was hoping for offline capability. I have practically ZERO 
capability to understand technical jargon. Is there a solution for me?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/be86afb8-e5d8-48b1-902f-35f9e5942aa3%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Coreboot VS Libreboot :: Which is better for Qubes OS ?

2017-11-06 Thread nikenuketrust
Intel sucks. You can read about this on 

https://www.networkworld.com/article/3236064/servers/minix-the-most-popular-os-in-the-world-thanks-to-intel.html

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/2144a6f3-92ad-4e1c-aa90-07d71aae652b%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.