Re: [qubes-users] Adding a Firefox add-on error to -dvm ?

2019-05-06 Thread haaber

On Mon, 6 May 2019 10:58:47 -0700 (PDT)
22...@tutamail.com wrote:


Recently I noticed an add-on needed update and when I went to update
it, it says it was no longer compatible? I knew enough to start the
-dvm using gnome->terminal->firefox in -dvm however this time it
didn't allow me to update the add-on?


Perhaps this is a side effect of firefox's recent (last day or two)
failure to update some key, leading everyone's firefox's to reject all
addons?  google this and you will find tons of people complaining.
You can circumvent this by disabling signing altogether (!?!).
Obviously it's ridiculous for me to suggest this on the qubes list; you
should not install unsigned updates. But I was fine doing this for
my already-installed addons, whose signatures had been checked before.
Once they come up with a fix, I will turn signing back on and then
update.

The update is through on debian (called firefox 60.6.2-esr), android
(different version number) and I guess also on fedora (but I have no
fedora anymore, so I cannot tell you. Just update all of your templateVMs.

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/e3bf66cd-c93f-fb14-4d25-8da8bbdbefec%40web.de.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Fixing support for H.264/MSE & H.264 playback on firefox in Fedora-29

2019-05-06 Thread Sphere
On Monday, May 6, 2019 at 11:38:19 PM UTC+8, Sergio Matta wrote:
> > Does anyone know which specific packages need to be installed
> 
> Try this info: 
> 
> https://forums.fedoraforum.org/showthread.php?317721-fedora-28-and-firefox-video(h264-youtube-gstreamer1)

Thank you very much for that reference! Thankfully I have tested all steps that 
I've done before on an AppVM so the unneeded stuff that I downloaded didn't 
remain.

The latter replies on the thread has the solid solution of doing
sudo dnf install compat-ffmpeg28

Which amazingly completed playback support on youtube
Also appreciate the fact that the thread mentioned dependencies needed to play 
twitter videos.

Cheers!

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/e2d4c7a9-1a20-446f-a828-ed90e76906fa%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Backup Error: Warning: unrecognized data found in configuration files

2019-05-06 Thread 'awokd' via qubes-users

Eccentric Butterfly:


Speaking of which, is there really any security benefit in making sure the 
backup is not connected to a network? Provided the encryption password is 
secure. I don't think this was mentioned in the docs anywhere as something to 
consider so it's probably a bit excessive on my part. Of course, provided the 
password is long and secure.

Since all contents of all AppVMs you select pass through your Backup VM, 
it's a good idea in general to be cautious about attaching it to a 
network if you don't have to. Same with any other AppVM, really. 
Security benefit is that it makes it harder to exfiltrate data.


--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/4c5c021a-8375-5e0a-0cc6-704cc6484e92%40danwin1210.me.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Backup Error: Warning: unrecognized data found in configuration files

2019-05-06 Thread Eccentric Butterfly
On Monday, 6 May 2019 17:14:46 UTC+1, daniel  wrote:
> On Sun, 5 May 2019 20:24:07 +
> "'awokd' via qubes-users"  wrote:
> 
> > Eccentric Butterfly:
> > > When I go to backup my Qubes, the backup screen shows a red error
> > > at the bottom of the window saying "Warning: unrecognized data
> > > found in configuration files".  
> 
> I ran into this and it was innocuous.  Probably you have deleted a qube
> that you backed up the last time you ran backup.  The system remembers
> the choices you made in the last backup and sets them up as the
> defaults. So it knows it is supposed to backup a qube that isn't there
> anymore.  So it says it's confused.  You can follow awokd's advice
> (the file will be recreated when you run backup; it is where the
> previous-backup settings are stored).  Or you can just ignore the
> message and continue with your backup.  I'd delete the file, just in
> case something more serious is happening.
> 
> Best Wishes,
> Daniel
> 
> > /etc/qubes/backup/qubes-manager-backup.conf" in dom0 terminal. This
> > will delete the configuration you saved last time you ran backup.
> > 
> > > Why is this? Is there anything I need to do? Will this have any
> > > effect on my ability to backup and restore? 
> > Haven't seen it before so don't know if it would prevent backups or 
> > restores.
> >


Thanks for your reply guys. I think it's a mix of what both of you are saying.

When I backup qubes to a hard drive, I make sure the qube is not connected to a 
network. When I'm done, I usually delete the qube. Though in this case, it 
wasn't deleted (or I re-made the qube with the same name). but it also wasn't 
running.

When I saw the contents of that file, I realised the path in the 'BACKUP' qube 
was no longer valid as 1) the qube was not running and 2) the hard drive would 
not be mounted. Thus, I ran the qube and mounted it and the error was gone.

Thanks for your help, it was much appreciated!
Butterfly.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/f1d22ab5-6296-47fb-8e7c-eb5fe6ed4243%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Backup Error: Warning: unrecognized data found in configuration files

2019-05-06 Thread Eccentric Butterfly
On Monday, 6 May 2019 22:35:55 UTC+1, Eccentric Butterfly  wrote:
> On Monday, 6 May 2019 17:14:46 UTC+1, daniel  wrote:
> > On Sun, 5 May 2019 20:24:07 +
> > "'awokd' via qubes-users"  wrote:
> > 
> > > Eccentric Butterfly:
> > > > When I go to backup my Qubes, the backup screen shows a red error
> > > > at the bottom of the window saying "Warning: unrecognized data
> > > > found in configuration files".  
> > 
> > I ran into this and it was innocuous.  Probably you have deleted a qube
> > that you backed up the last time you ran backup.  The system remembers
> > the choices you made in the last backup and sets them up as the
> > defaults. So it knows it is supposed to backup a qube that isn't there
> > anymore.  So it says it's confused.  You can follow awokd's advice
> > (the file will be recreated when you run backup; it is where the
> > previous-backup settings are stored).  Or you can just ignore the
> > message and continue with your backup.  I'd delete the file, just in
> > case something more serious is happening.
> > 
> > Best Wishes,
> > Daniel
> > 
> > > /etc/qubes/backup/qubes-manager-backup.conf" in dom0 terminal. This
> > > will delete the configuration you saved last time you ran backup.
> > > 
> > > > Why is this? Is there anything I need to do? Will this have any
> > > > effect on my ability to backup and restore? 
> > > Haven't seen it before so don't know if it would prevent backups or 
> > > restores.
> > >
> 
> 
> Thanks for your reply guys. I think it's a mix of what both of you are saying.
> 
> When I backup qubes to a hard drive, I make sure the qube is not connected to 
> a network. When I'm done, I usually delete the qube. Though in this case, it 
> wasn't deleted (or I re-made the qube with the same name). but it also wasn't 
> running.
> 
> When I saw the contents of that file, I realised the path in the 'BACKUP' 
> qube was no longer valid as 1) the qube was not running and 2) the hard drive 
> would not be mounted. Thus, I ran the qube and mounted it and the error was 
> gone.
> 
> Thanks for your help, it was much appreciated!
> Butterfly.

Speaking of which, is there really any security benefit in making sure the 
backup is not connected to a network? Provided the encryption password is 
secure. I don't think this was mentioned in the docs anywhere as something to 
consider so it's probably a bit excessive on my part. Of course, provided the 
password is long and secure.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/22534478-c0e4-4428-adcf-35baa15aa4ce%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] USB not recognized

2019-05-06 Thread 'awokd' via qubes-users

'Whenow' via qubes-users wrote on 5/6/19 6:41 PM:

**Qubes OS version**
R4.0

**Affected component(s) or functionality**
USB devices not recognized

**Brief summary**
dom0 recognizes USB ports but nothing attached. I can plug in USB devices and 
lspci only shows the controllers, lsusb only shows the hubs in sys-usb and 
nothing in dom0. Nothing changes when I plug/unplug a USB device. Qubes devices 
widget only ever shows dom0:mic. There was one instance one time that I somehow 
got a USB hard drive to get recognized and copy data off but restarting 
computer lost the connection. Changing ports makes no difference.

**To Reproduce**
1. Open dom0 terminal
2. Plug in a USB device
3. "$ lsusb" gives null response

**Expected behavior**
I expect the Qubes devices widget to show my USB devices accurately, dom0 to 
recognize physically connected USB devices, lsusb's output to change depending 
on what devices are physically connected (in dom0 and sys-usb).

**Actual behavior**
Nothing happens. System acts as if no USB devices are ever inserted.

I've tried following the guides:
https://www.qubes-os.org/doc/usb-devices/
https://www.qubes-os.org/doc/block-devices/

Thanks for your input.

Cross reference a dom0 terminal's lspci with what USB controllers are 
assigned to sys-usb's Qube Settings/Devices tab. Be careful if using a 
USB keyboard, you can lock yourself out if you add the wrong controller.


If you have a combined Thunderbolt/USB3 controller, you might have to 
set it to compatibility mode in UEFI config (and double check sys-usb 
assignment afterwards).


Lastly, watch journalctl inside your sys-usb as you add and remove 
devices for hints. You may need to fine tune your USB controllers with 
options in 
https://www.qubes-os.org/doc/pci-devices/#pci-passthrough-issues, but I 
wouldn't expect it at this point.


--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/ec0d7818-eec2-462e-1095-531fc6a7acf2%40danwin1210.me.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] USB not recognized

2019-05-06 Thread 'Whenow' via qubes-users
**Qubes OS version**
R4.0

**Affected component(s) or functionality**
USB devices not recognized

**Brief summary**
dom0 recognizes USB ports but nothing attached. I can plug in USB devices and 
lspci only shows the controllers, lsusb only shows the hubs in sys-usb and 
nothing in dom0. Nothing changes when I plug/unplug a USB device. Qubes devices 
widget only ever shows dom0:mic. There was one instance one time that I somehow 
got a USB hard drive to get recognized and copy data off but restarting 
computer lost the connection. Changing ports makes no difference.

**To Reproduce**
1. Open dom0 terminal
2. Plug in a USB device
3. "$ lsusb" gives null response

**Expected behavior**
I expect the Qubes devices widget to show my USB devices accurately, dom0 to 
recognize physically connected USB devices, lsusb's output to change depending 
on what devices are physically connected (in dom0 and sys-usb).

**Actual behavior**
Nothing happens. System acts as if no USB devices are ever inserted.

I've tried following the guides:
https://www.qubes-os.org/doc/usb-devices/
https://www.qubes-os.org/doc/block-devices/

Thanks for your input.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/l6jGpADIECGBqz_Tn1ANoxxCv9lssuU7D1gwACvudHyjO35B_xPX1R8hggzUYsHnO6EwB-gfo0XmDPmSOE32Ro2ao4Wwulph3YZ4z45zk6Y%3D%40protonmail.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Adding a Firefox add-on error to -dvm ?

2019-05-06 Thread Daniel Allcock
On Mon, 6 May 2019 10:58:47 -0700 (PDT)
22...@tutamail.com wrote:

> Recently I noticed an add-on needed update and when I went to update
> it, it says it was no longer compatible? I knew enough to start the
> -dvm using gnome->terminal->firefox in -dvm however this time it
> didn't allow me to update the add-on?

Perhaps this is a side effect of firefox's recent (last day or two)
failure to update some key, leading everyone's firefox's to reject all
addons?  google this and you will find tons of people complaining.
You can circumvent this by disabling signing altogether (!?!).
Obviously it's ridiculous for me to suggest this on the qubes list; you
should not install unsigned updates. But I was fine doing this for
my already-installed addons, whose signatures had been checked before.
Once they come up with a fix, I will turn signing back on and then
update.

(What worked for me was to set xpinstall.signatures.required to false
in about:config.  Apparently this setting is only available on dev
builds, which the stock Fedora firefox seems to be.)

Best,
Daniel

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20190506133702.3f588cda%40allcock.org.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: email fetching /reading

2019-05-06 Thread 22rip
I gave up on trying to make email secure...just too many variables.

Some ideas that help make it more secure include:

1) Go thru thunderbird and adjust setting (no image preview, plain text, etc...)
2) Get a few email addresses, one for shopping, one for friendamies, 1 for 
business, 1 for friends, 1 for shady sites (e.g. Linkedin)
3) In your email VM, white list the email providers IPs so the VM can only 
reach the email provider
4) Use a non connected -dvm for the email VM
5) Use whonix-gw as the network VM
6) Use an IMAP as you state and turn off network connections after the new 
emails have downloaded

Not sure this answers your question but I too am open to other email hardening 
tips and tricks...

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/f0568c71-d373-47da-bde1-8a7cd4c7b8c1%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Adding a Firefox add-on error to -dvm ?

2019-05-06 Thread 22rip
I used to be able to add "add-ons" to my -dvm's (e.g. HHTPS Everywhere, No 
Script, etc...). I would periodically update these add-ons in the -dvm.

Recently I noticed an add-on needed update and when I went to update it, it 
says it was no longer compatible? I knew enough to start the -dvm using 
gnome->terminal->firefox in -dvm however this time it didn't allow me to update 
the add-on?

Not sure this is a security enhancement with a recent update but any feedback 
would be appreciated...I hate running scripts on random webpages...

Thx rip22...

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/d24e8d16-7e45-412f-af45-2630de4c7c92%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Backup Error: Warning: unrecognized data found in configuration files

2019-05-06 Thread Daniel Allcock
On Sun, 5 May 2019 20:24:07 +
"'awokd' via qubes-users"  wrote:

> Eccentric Butterfly:
> > When I go to backup my Qubes, the backup screen shows a red error
> > at the bottom of the window saying "Warning: unrecognized data
> > found in configuration files".  

I ran into this and it was innocuous.  Probably you have deleted a qube
that you backed up the last time you ran backup.  The system remembers
the choices you made in the last backup and sets them up as the
defaults. So it knows it is supposed to backup a qube that isn't there
anymore.  So it says it's confused.  You can follow awokd's advice
(the file will be recreated when you run backup; it is where the
previous-backup settings are stored).  Or you can just ignore the
message and continue with your backup.  I'd delete the file, just in
case something more serious is happening.

Best Wishes,
Daniel

> /etc/qubes/backup/qubes-manager-backup.conf" in dom0 terminal. This
> will delete the configuration you saved last time you ran backup.
> 
> > Why is this? Is there anything I need to do? Will this have any
> > effect on my ability to backup and restore? 
> Haven't seen it before so don't know if it would prevent backups or 
> restores.
> 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20190506111437.6a563379%40allcock.org.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Fixing support for H.264/MSE & H.264 playback on firefox in Fedora-29

2019-05-06 Thread Sergio Matta

> Does anyone know which specific packages need to be installed

Try this info: 

https://forums.fedoraforum.org/showthread.php?317721-fedora-28-and-firefox-video(h264-youtube-gstreamer1)

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/7a46b606-e24e-441f-b05d-81fcdeff8d7e%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.