Re: [qubes-users] Intel ME and AEM/HEADS

2019-01-29 Thread Chris Laprise
On 1/29/19 8:59 PM, Frank Beuth wrote: Can someone explain the interaction between Anti Evil Maid/HEADS and the Intel Management Engine to me? I read an article which stated that disabling Intel ME also prevents installing AEM (and related technologies), but I am not sure why (or if this is

[qubes-users] Intel ME and AEM/HEADS

2019-01-29 Thread Frank Beuth
Can someone explain the interaction between Anti Evil Maid/HEADS and the Intel Management Engine to me? I read an article which stated that disabling Intel ME also prevents installing AEM (and related technologies), but I am not sure why (or if this is really true). Is ME needed to access the

Re: [qubes-users] Debian Template APT Vulnerability - A ticking bomb?

2019-01-29 Thread unman
On Mon, Jan 28, 2019 at 01:30:29PM -0800, goldsm...@riseup.net wrote: > On 2019-01-28 19:46, billol...@gmail.com wrote: > > On Monday, January 28, 2019 at 10:27:32 AM UTC-5, gold...@riseup.net wrote: > >> On 2019-01-27 19:15, billol...@gmail.com wrote: > >> > On Sunday, January 27, 2019 at

[qubes-users] passhprase or os boot doesn't prompt from gui anymore?

2019-01-29 Thread cooloutac
Just want to make sure this is normal behavior. I noticed a couple weeks ago the passphrase asks me type in from boot prompt and doesn't ask me to type in passphrase from gui screen anymore. Is this normal? Thanks, Rich. -- You received this message because you are subscribed to the

[qubes-users] Re: 4.0.1 persistent external LVM block device attach

2019-01-29 Thread Eric
Got around to checking and this issue has been open for over a year: https://github.com/QubesOS/qubes-issues/issues/3437 -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an

[qubes-users] Script Error

2019-01-29 Thread R A F
Hi People Currently I use Qubes 4.0 and Standalone VM based on debian template. When I browse internet very often I get this error message and CPU gets crazy chrome://global/content/bindings/notification.xml:35 Does anyone have similar issues? Regards Raf -- You received this message because

Re: [qubes-users] Qubes 4.0.x - Linux kernel 4.19.15 package available in testing repository

2019-01-29 Thread donoban
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 1/29/19 11:33 AM, Patrik Hagara wrote: > > Update! > > Managed to get rid of the error (and more importantly, the > annoying artifacts) by forcing Xorg to use the generic modesetting > driver instead of i915/i965. > > Pages that have been

[qubes-users] Re: Broadcom wireless driver issue.

2019-01-29 Thread qma ster
Broadcom hardware/software is a proprietary piece of crap that doesn't work well at the opensource operating systems. It could be easier to just replace your Broadcom MiniPCIe card with something from Atheros ath9k family which has opensource drivers / opensource firmware and work perfectly

Re: [qubes-users] QSB #46: APT update mechanism vulnerability

2019-01-29 Thread Alexandre Belgrand
Le mardi 29 janvier 2019 à 02:24 -0800, goldsm...@riseup.net a écrit : > To Alexandre > So you found this stuff on the internet and were gullible enough to > swallow it, hook line and sinker, without first verifying its > authenticity. I suppose your allegations against the Debian Team's >

Re: getting rid of ME on modern CPUs (Re: [qubes-users] QSB #46: APT update mechanism vulnerability)

2019-01-29 Thread Stuart Perkins
Like I said, we need to reverse engineer. On Mon, 28 Jan 2019 17:56:17 + Holger Levsen wrote: >On Mon, Jan 28, 2019 at 11:46:55AM -0600, Stuart Perkins wrote: >> Up to a certain manufacture, you can go to coreboot and lose the ME >> entirely. After that point, setting the HAP bit may be

Re: [qubes-users] Qubes 4.0.x - Linux kernel 4.19.15 package available in testing repository

2019-01-29 Thread Patrik Hagara
On 1/25/19 3:16 PM, Marek Marczykowski-Górecki wrote: > On Fri, Jan 25, 2019 at 01:58:59PM +0100, Patrik Hagara wrote: >> On 1/24/19 5:18 PM, Patrik Hagara wrote: >>> On 1/20/19 1:57 AM, Marek Marczykowski-Górecki wrote: Hi all, There is updated "kernel" package available in

Re: [qubes-users] QSB #46: APT update mechanism vulnerability

2019-01-29 Thread goldsmith
On 2019-01-28 21:51, Alexandre Belgrand wrote: > Le lundi 28 janvier 2019 à 13:08 -0800, goldsm...@riseup.net a écrit : >> To Alexandre Belgrand >> >> I'm intrigued how you know can catagorically state "CAs and GNU/Linux >> distributions are #1 targets for national >> intelligence agencies". This

Re: [qubes-users] QSB #46: APT update mechanism vulnerability

2019-01-29 Thread qubes-fan
Jan 28, 2019, 9:25 PM by alexandre.belgr...@mailbox.org: > Le lundi 28 janvier 2019 à 16:47 +0100, > qubes-...@tutanota.com > > a > écrit : > >> What do you yourself use? >> > Hope I can answer too. > > I use an X230 with Intel ME disabled from BIOS. It costs

Re: [qubes-users] QSB #46: APT update mechanism vulnerability

2019-01-29 Thread Alexandre Belgrand
Le mardi 29 janvier 2019 à 09:51 +0200, Ilpo Järvinen a écrit : > Yeah yeah, the only modification was that chip as claimed in the > article? > Magically all the necessary signal pins were routed to its location > but nothing else was changed (and you cannot have that many pins in > that sized