date:20171119

I guess you could keep the disk around for the highly unlikely event that some 
fatal exploit is discovered that would be applicable here. It's probably better 
to pretend it never existed, though, for the time being.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/c91e7164-4a41-4d0f-8d6f-223db600c4c6%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: Disk password

I guess you could keep the disk around for the highly unlikely event that some 
fatal exploit is discovered that would apply to it. It's probably better to 
pretend it never existed, though, for the time being.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/682f767e-3142-4a1c-853d-bcd76fd211ab%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: Disk password

Everything was on that computer. I’ll give it a while to try to figure it out. 
If I can’t get in it I’ll just wipe it all and try to forget about it. As most 
of you knot btc has risen to a ridiculous amount. Considering what I paid for 
the btc I have on this computer and the profit I’d have now.. makes me sick.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/320e9b7d-7066-4188-82fe-18ee5f4612cd%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Possible privacy concerns with Qubes 4 and the transition away from paravirtualization?

I've been reading about Qubes OS for the past few days, and I came across the
blog post below, detailing the switch from paravirtualization to
hardware-enforced memory virtualization in Qubes 4. As I understand, the switch
is intended to improve security (and avoids the overhead added by conventional
hardware-assisted virtualization by using SLAT).

https://www.qubes-os.org/news/2016/07/21/new-hw-certification-for-q4/

However, I noticed a few people voicing privacy concerns regarding the switch
from paravirtualization to hardware-enforced memory virtualization.

Here's one such comment, taken from an r/privacy Reddit thread.

"Qubes v.4 does concern me though. I am NOT an expert here so I dont want to
spread bad info but: Qubes 4 plans to ditch paravirtualization in favor of
hardware-enforced memory virtualization (which I will call HEMV though I dont
think it has an official acronym). This is good from a security standpoint-
paravirtualization is vulnerable to code exploits (2 have happened to Xen,
though never in the wild, KVM/Virtualbox/VMware have all had exploits), while
HEMV is not. However, HEMV makes the profiling of hardware easier to
accomplish. Given the recent spat of articles that talk about hardware
profiling being used as a means to profile and track users, you can understand
the basis for my concern- paravirtualization makes hardware profiling
impossible unless an exploit is found to defeat it."

Does this hold any water? Does the switch from paravirtualization to HVM/SLAT
degrade privacy by allowing easier hardware fingerprinting?

Sorry if this question has been asked and answered before; I searched around
for a while, and found none. Also, feel free to correct me on anything I got
wrong. Thanks! :)

--
You received this message because you are subscribed to the Google Groups
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/qubes-users/13b891e1-db96-462c-8410-f024fcf684e1%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Possible privacy concerns with Qubes 4.0 and the transition away from paravirtualization?

I've been reading about Qubes OS for the past few days, and I came across the
blog post below, detailing the switch from paravirtualization to
hardware-enforced memory virtualization in Qubes 4. As I understand, the switch
is intended to improve securiy (and avoids the overhead added by conventional
hardware-assisted virtualization by using SLAT).

https://www.qubes-os.org/news/2016/07/21/new-hw-certification-for-q4/

However, I noticed a few people voicing privacy concerns regarding the switch
from paravirtualization to hardware-enforced memory virtualization.

Here's one such comment, taken from an r/privacy Reddit thread.

Does this hold any water? Does the switch from paravirtualization to HVM/SLAT
degrade privacy by allowing easier hardware fingerprinting?

Sorry if this question has been asked and answered before; I searched around
for a while, and found none. Also, feel free to correct me on anything I got
wrong. Thanks! :)

--
You received this message because you are subscribed to the Google Groups
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/qubes-users/ca25af97-cb0d-4b99-bf55-70eb99dd92b7%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: Disk password

2017-11-19 Thread Finsh

Well...at that point you should get used to the fact that the btc are 
lost.Depending on the Amount, it would be most likely more expensive 
bruteforcing it.
Are you absolutely sure you dont have your wallet-seed somewhere?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/3b9d92be-b229-4b2a-8438-41c2f47edbfc%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] qubes 4.0rc2 install question

2017-11-19 Thread haaber

Hello,
I tried toinstall Q4.0-rc2 today. To my surprise the installer warns me
about hardware incompatibilities that should not exist, according to the
HCL : I have a i7-4600U cpu that has VT-x with EPT and VT-d as it should.
So I am confused ... qubes-hcl-report says "HVM not active", same for
"I/O MMU" and further "no HAP". Is this a maybe BIOS setting I have to
change? Or another (non-cpu) hardware incompatibility?  Thank you,
Bernhard

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/399a05fb-fecb-0864-1046-f3ed338cea9a%40web.de.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Copying file from Debian8(or Whonix) to a Fedora VM?

2017-11-19 Thread Chris Laprise

On 11/19/2017 01:48 PM, vel...@tutamail.com wrote:

I have been using Qubes 3.2 for about 5 months and love it...thank you all who
have contributed!

I am a noobie so be gentle...I am also by no means an expert at Linux however I
have been forced to learn quick.

I managed to upgrade my Fedora template to 25 and have most of my VMs running
on Fedora25 except for the default Debian8(Which I have reinstalled since my
initial Qubes installation), my Whonix WS and GW are also defaults. I have also
periodically upgraded these templates.

I have some basic questions I am hoping I can get some help with:

1) It seems that alot of the experts use Debian as thier working VMs(Personal,
Work, Banking, etc...) and have Fedora as the sys-firewall, sys-net, etc...is
it more secure to use Debian in this way? Am I just as secure as using Fedora
for my working VMs? I would have to think hacking Xen, then Fedora, then Debian
would be harder...

There are three issues that stand out for me:

* Fedora is the only distro I've seen that doesn't sign their repository
manifest. The idea is if you want full security for updates you pay $$$
for RHEL (Red Hat controls the Fedora project).

* Fedora releases expire (stop getting security updates) after a
relatively short period (again, idea is pay $$$ to Red Hat for long-term
updates).

* Fedora repositories are pretty sparse compared to the software
available in Debian and Ubuntu.

These are the main reasons I choose to use Debian over Fedora. Debian
templates also work great for sys-net and firewall/VPN.

2) I have been able to copy/move files from Fedora VMs to other Fedora VMs but I have struggled to try and copy/move
files from Debian(or Whonix-ws) to Fedora? Fedora has the "File" option from my "Q" menu(top
right), when I am in the files I can right click and "Copy to Other AppVM" or "Open in DispVM". How
do I access Debians version?

The debian-8 template is close to a 'minimal' release and comes without
a file browser. You can copy from the terminal with the 'qvm-copy-to-vm'
command, or install a supported file browser (the one used in Fedora
template is nautilus).

When installing nautilus, remember that its meant to work in concert
with the rest of Gnome... it may not work right if you install it by
specifying 'nautilus' (also you will have to install the python-gtk2
package separately). The easiest way to get this working like it does in
Fedora is to run 'sudo tasksel' and select the Gnome desktop for
installation.

Chris Laprise, tas...@posteo.net
https://github.com/tasket
https://twitter.com/ttaskett
PGP: BEE2 20C5 356E 764A 73EB 4AB3 1DC4 D106 F07F 1886

--
You received this message because you are subscribed to the Google Groups
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/qubes-users/9affcebb-a1e9-8e8c-1283-e73151edf431%40posteo.net.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: Disk password

On Sunday, November 19, 2017 1:29:03 PM UTC tbennett1...@gmail.com wrote:
> I have no idea the order any of it was put in

You can still try to bruteforce it, but I would start getting used to the fact 
that the contents of this drive are lost for good.

-- 
Pozdrawiam,
Michał "rysiek" Woźniak

Zmieniam klucz GPG :: http://rys.io/pl/147
GPG Key Transition :: http://rys.io/en/147

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/5010802.BaddXavdCM%40qubuntu.
For more options, visit https://groups.google.com/d/optout.


signature.asc
Description: This is a digitally signed message part.

[qubes-users] Re: Disk password

I have no idea the order any of it was put in

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/8e6ef0ec-6fbe-4ebd-a24f-2839c75817bb%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] R4.0, Ubuntu, and Salt

On Saturday, November 18, 2017 10:30:49 PM UTC Marek Marczykowski-Górecki 
wrote:
> On Sat, Nov 18, 2017 at 06:36:17PM +, rysiek wrote:
> > Also, started playing with Salt, wrote a nice sls file to install all the
> > stuff I need in the Kubuntu VM, but... each time I run it I get an
> > "ERROR". I am guessing this is related to the less-than-stellar support
> > for Ubuntu templates in Qubes R4.0.
> 
> Run qubesctl with --show-output, or check /var/log/qubes/mgmt-*.log for
> details.

Thanks. This only gives me this error:
2017-11-19 22:06:19,000 calling 'state.highstate'...
2017-11-19 22:06:55,812 output: qubuntu:
2017-11-19 22:06:55,813 output: --
2017-11-19 22:06:55,813 output: _error:
2017-11-19 22:06:55,814 output: Failed to return clean data
2017-11-19 22:06:55,814 output: retcode:
2017-11-19 22:06:55,814 output: 1
2017-11-19 22:06:55,814 output: stderr:
2017-11-19 22:06:55,814 output: stdout:
2017-11-19 22:06:55,814 exit code: 20

is tehre any way to enable more debug output?

-- 
Pozdrawiam,
Michał "rysiek" Woźniak

Zmieniam klucz GPG :: http://rys.io/pl/147
GPG Key Transition :: http://rys.io/en/147

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/1905541.GLcTUDNXif%40qubuntu.
For more options, visit https://groups.google.com/d/optout.


signature.asc
Description: This is a digitally signed message part.

[qubes-users] Re: Disk password

2017-11-19 Thread Finsh

If you remember it that specific, you probably know at least parts of the 
password? Otherwise, it would be almost impossible to bruteforce such a long 
Password.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/a8b4d7f9-9c82-41f1-863e-f37842599206%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Disk password

Mine was 22 letters symbols and numbers. 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/46f766d4-67b3-44a1-abd1-a9c9c7278dfb%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Disk password

On Sunday, November 19, 2017 11:15:01 AM UTC tbennett1...@gmail.com wrote:
> I have bitcoin in a vm wallet. So it turns into a very costly issue.

Depending on how much time and money you're willing to invest, how long and
complicated the password is, and how much of the password you remember, you
might be able bruteforce your way in.

Qubes uses LUKS to encrypt the disk:
https://en.wikipedia.org/wiki/Linux_Unified_Key_Setup

There is a number of LUKS bruteforcing tools you might try and resources you
might dive into:
https://github.com/glv2/bruteforce-luks
http://irq5.io/2014/11/19/bruteforcing-luks-volumes-explained/
https://www.hacker10.com/other-computing/brute-force-linux-encryption-with-luks-volume-cracker/

Note the second link -- it talks about LUKS headers, which is the only thing
you need to copy off of your drive to start bruteforcing on other machines.
Don't try bruteforcing on your laptop, it will take forever. Instead, get the
LUKS header off of it, get some solid CPU power somewhere and use that.

When I needed to recover a lost LUKS password (it was a 6-word diceware
passphrase, 4 words and the first letter of the 5th I remembered), it took me
~30h of bruteforcing on some 20 cores to get it.

Good luck!

--
Pozdrawiam,
Michał "rysiek" Woźniak

Zmieniam klucz GPG :: http://rys.io/pl/147
GPG Key Transition :: http://rys.io/en/147

--
You received this message because you are subscribed to the Google Groups
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/qubes-users/2206727.TezqhYYeyA%40qubuntu.
For more options, visit https://groups.google.com/d/optout.

signature.asc
Description: This is a digitally signed message part.

Re: [qubes-users] Disk password

I have bitcoin in a vm wallet. So it turns into a very costly issue.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/3584a46c-1bdd-4821-82cf-e1def1c72751%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Disk password

On Sunday, November 19, 2017 10:48:11 AM UTC tbennett1...@gmail.com wrote:
> Haven’t used my computer for a few months, can’t remember the disk password
> to boot the os. Possible to change it?

The whole point of full disk encryption is making sure that without the 
password nobody can get in... So, no.

-- 
Pozdrawiam,
Michał "rysiek" Woźniak

Zmieniam klucz GPG :: http://rys.io/pl/147
GPG Key Transition :: http://rys.io/en/147

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/1686166.FoxXDqDcxE%40qubuntu.
For more options, visit https://groups.google.com/d/optout.


signature.asc
Description: This is a digitally signed message part.

[qubes-users] Copying file from Debian8(or Whonix) to a Fedora VM?

2017-11-19 Thread velcro

I have been using Qubes 3.2 for about 5 months and love it...thank you all who
have contributed!

I am a noobie so be gentle...I am also by no means an expert at Linux however I
have been forced to learn quick.

I have some basic questions I am hoping I can get some help with:

2) I have been able to copy/move files from Fedora VMs to other Fedora VMs but
I have struggled to try and copy/move files from Debian(or Whonix-ws) to
Fedora? Fedora has the "File" option from my "Q" menu(top right), when I am in
the files I can right click and "Copy to Other AppVM" or "Open in DispVM". How
do I access Debians version?

Thanks in advance for any help...

--
You received this message because you are subscribed to the Google Groups
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/qubes-users/00c1d251-d9a4-46bb-b808-6c9097f486ce%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Disk password