[qubes-users] Re: Installing VPN in Qubes Versus VPN on a Router

[amadaus]

amad...@riseup.net:
> We see much correspondence in these forums about installing a VPN within
> Qubes. Surely, the most secure place for VPN is to install on a Router?
> I say these things after reading the following paper [
> https://cryptome.org/2013/12/Full-Disclosure.pdf ] in which a group of
> hackers demonstrate that the majority of routers (in-particular those
> provided by ISP's] have backdoors to government agencies. These
> adversary's are able attack our LAN and its devices; including the
> ability to intercept VPN and Tor traffic.
> The solution they say is to isolate these rogue routers in the
> Militarized Zone by creating a DMZ [demilitarized zone]. Achieved by
> installing a 2nd router [flashed with open source firmware such as
> OPenWRT]. It is here, on the router, that we should enable and run OpenVPN.
> Thoughts on this paper and it's conclusions are welcomed
> 
Thanks everyone for your contributions.
Implicit in most of your replies is a distinct distrust of the
modems/routers provided to us.
If anyone is interested, the solution we adopted to securing our LAN is
copied from this blog;
https://tokyobreeze.wordpress.com/2015/02/01/create-a-nsa-and-hacker-proof-home-network-that-you-control/
This guy uses a couple of cheap routers loaded with OpenWRT which sit
behind his infected Modem. His 2nd routed utilises OpenVPN Client and is
configured to protect "high value" devices.
We've successfully copied this configuration and it seems!! to work. -
unless you know better??

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/015a80f8-3cf1-1efc-54fb-e42a3ef3d47e%40riseup.net.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: Dear qubes-users

[amadaus]

Mr. Harrison:
> Dear qubes-users, 
> 
> I am long time qubes follower and user. I apologize in advance if anyone 
> feels this request is spam. 
> 
> I am looking for two invite codes needed to sign up to anonymous 
> riseup.net email service. 
> 
> I am hoping there are some qubes users who are riseup.net account 
> holders. 
> 
> Can anyone please send me a couple of invite codes that I might be able 
> to sign up? 
> 
> Thank you in advance.
> 
Hi
I'm sorry but I personally dont think its ethical to vouch for a
complete stranger. Especially as you do not appear to have a record on
this forum.
Might I suggest you apply to riseup via their website stating why you
think you deserve an account. They usually grant one after about a week
or so.
Good luck

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/fa08b0a5-4cb3-3b0f-b792-0237bbdf5edf%40riseup.net.
For more options, visit https://groups.google.com/d/optout.


signature.asc
Description: OpenPGP digital signature

[qubes-users] Re: Dear qubes-users

[amadaus]

Mr. Harrison:
> Dear qubes-users, 
> 
> I am long time qubes follower and user. I apologize in advance if anyone 
> feels this request is spam. 
> 
> I am looking for two invite codes needed to sign up to anonymous 
> riseup.net email service. 
> 
> I am hoping there are some qubes users who are riseup.net account 
> holders. 
> 
> Can anyone please send me a couple of invite codes that I might be able 
> to sign up? 
> 
> Thank you in advance.
> 
Hi
I'm sorry but I personally dont think its ethical to vouch for a
complete stranger. Especially as you do not appear to have a record on
this forum.
Might I suggest you apply to riseup via their website stating why you
think you deserve an account. They usually grant one after about a week
or so.
Good luck

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/97ea85e9-4158-bad9-de09-459ebce8a8ef%40riseup.net.
For more options, visit https://groups.google.com/d/optout.


signature.asc
Description: OpenPGP digital signature

[qubes-users] Re: Dear qubes-users

[amadaus]

Mr. Harrison:
> Dear qubes-users, 
> 
> I am long time qubes follower and user. I apologize in advance if anyone 
> feels this request is spam. 
> 
> I am looking for two invite codes needed to sign up to anonymous 
> riseup.net email service. 
> 
> I am hoping there are some qubes users who are riseup.net account 
> holders. 
> 
> Can anyone please send me a couple of invite codes that I might be able 
> to sign up? 
> 
> Thank you in advance.
> 
Hi
I'm sorry but I personally dont think its ethical to vouch for a
complete stranger. Especially as you do not appear to have a record on
this forum.
Might I suggest you apply to riseup via their website stating why you
think you deserve an account. They usually grant one after about a week
or so.
Good luck

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/6c2840f5-2e1e-0b0c-adae-b1baefc8da2a%40riseup.net.
For more options, visit https://groups.google.com/d/optout.


signature.asc
Description: OpenPGP digital signature

[qubes-users] Re: Debian-8 Update Hangs

[amadaus]

amadaus:
> Andrew David Wong:
>> On 2016-09-17 07:21, amadaus wrote:
>>> In Qubes OS 3.2 rc2 updating Debian 8 via VM Manager and the terminal
>>> resulted in failure - it hangs forever. Consequently I tried a fresh
>>> install of OS 3.2 rc3. I successfully uddated Dom0, Fedora23 and Whonix
>>> templates BUT when it came to Debian-8 it stubbornly refuses to update.
>>> Anyone any suggestions as to what I'm doing wrong.
>>> PS the command i'm using in terminal is: sudo apt-get update && sudo
>>> apt-get dist-upgrade.
>>
>>
>> I've noticed that when I update Debian and Whonix templates using that
>> command, the terminal appears to hang, but the template actually
>> updates successfully. Can you try running the same update command again
>> afterward? It should complete successfully (with 0 new packages
>> updated, available, etc.) the second time.
>>
> Here is the output from D8 terminal
> 
>  user@debian-8:~$ sudo apt-get update && sudo apt-get dist-upgrade
> Get:1 http://security.debian.org jessie/updates InRelease [63.1 kB]
> Hit http://deb.qubes-os.org jessie InRelease
> 
> Get:2 http://security.debian.org jessie/updates/main amd64 Packages [304 kB]
> Get:3 http://security.debian.org jessie/updates/contrib amd64 Packages
> [2,506 B]
> Get:4 http://security.debian.org jessie/updates/non-free amd64 Packages
> [14 B]
> Hit http://deb.qubes-os.org jessie/main amd64 Packages
> 
> Get:5 http://security.debian.org jessie/updates/contrib Translation-en
> [1,211 B]
> Get:6 http://security.debian.org jessie/updates/main Translation-en [162
> kB]
> Get:7 http://security.debian.org jessie/updates/non-free Translation-en
> [14 B]
> Ign http://deb.qubes-os.org jessie/main Translation-en_US
> 
> Ign http://deb.qubes-os.org jessie/main Translation-en
> 
> 100% [Waiting for headers]
> It is always at this pointthat the system hangs for hours.
> 
> 
Solved
Instead of using command sudo apt-get update && sudo apt-get
dist-upgrade - which always fails. Use the shortened command sudo
apt-get dist-upgrade - it worked a treat!

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/49bb9646-a0f4-96d2-332f-df378d791ab0%40riseup.net.
For more options, visit https://groups.google.com/d/optout.


signature.asc
Description: OpenPGP digital signature

[qubes-users] Email Server - Mail-in-a-box

[amadaus]

I'd like to create my own personal email server but don not feel
technically competent to set it up securely. However I've read about a
"out of the box" solution called Mail-In-A-Box. Do any Qubes users have
experience or thoughts on this potential solution?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/nrqoe6%24joa%241%40blaine.gmane.org.
For more options, visit https://groups.google.com/d/optout.


signature.asc
Description: OpenPGP digital signature

[qubes-users] Re: Debian-8 Update Hangs

[amadaus]

Andrew David Wong:
> On 2016-09-17 07:21, amadaus wrote:
>> In Qubes OS 3.2 rc2 updating Debian 8 via VM Manager and the terminal
>> resulted in failure - it hangs forever. Consequently I tried a fresh
>> install of OS 3.2 rc3. I successfully uddated Dom0, Fedora23 and Whonix
>> templates BUT when it came to Debian-8 it stubbornly refuses to update.
>> Anyone any suggestions as to what I'm doing wrong.
>> PS the command i'm using in terminal is: sudo apt-get update && sudo
>> apt-get dist-upgrade.
> 
> 
> I've noticed that when I update Debian and Whonix templates using that
> command, the terminal appears to hang, but the template actually
> updates successfully. Can you try running the same update command again
> afterward? It should complete successfully (with 0 new packages
> updated, available, etc.) the second time.
> 
Here is the output from D8 terminal

 user@debian-8:~$ sudo apt-get update && sudo apt-get dist-upgrade
Get:1 http://security.debian.org jessie/updates InRelease [63.1 kB]
Hit http://deb.qubes-os.org jessie InRelease

Get:2 http://security.debian.org jessie/updates/main amd64 Packages [304 kB]
Get:3 http://security.debian.org jessie/updates/contrib amd64 Packages
[2,506 B]
Get:4 http://security.debian.org jessie/updates/non-free amd64 Packages
[14 B]
Hit http://deb.qubes-os.org jessie/main amd64 Packages

Get:5 http://security.debian.org jessie/updates/contrib Translation-en
[1,211 B]
Get:6 http://security.debian.org jessie/updates/main Translation-en [162
kB]
Get:7 http://security.debian.org jessie/updates/non-free Translation-en
[14 B]
Ign http://deb.qubes-os.org jessie/main Translation-en_US

Ign http://deb.qubes-os.org jessie/main Translation-en

100% [Waiting for headers]
It is always at this pointthat the system hangs for hours.


-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/a9b7c3a7-2b08-a8a3-8ef5-9bab0fac889f%40riseup.net.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: R3.2_rc3.iso Corrupt Download?

[amadaus]

Andrew David Wong:
> On 2016-09-16 04:41, amadaus wrote:
>> I have downloaded Qubes R3.2-rc3 iso and in the course of verifying
>> signatures received the following output:
>> [user@rubbish ~]$ gpg -v --verify
>> '/home/user/Downloads/Qubes-R3.2-rc3-x86_64.iso.asc'
>> '/home/user/Downloads/Qubes-R3.2-rc3-x86_64.iso'
>> gpg: armor header: Version: GnuPG v2
>> gpg: Signature made Wed 31 Aug 2016 01:08:18 PM BST using RSA key ID
>> 03FA5082
>> gpg: using PGP trust model
>> gpg: Good signature from "Qubes OS Release 3 Signing Key"
>> gpg: binary signature, digest algorithm SHA256
>> [user@rubbish ~]$ gpg --list-sig 03FA5082
>> pub   4096R/03FA5082 2014-11-19
>> uid  Qubes OS Release 3 Signing Key
>> sig  36879494 2014-11-19  Qubes Master Signing Key
>> sig 3E2986940 2016-01-04  [User ID not found]
>> sig 303FA5082 2014-11-19  Qubes OS Release 3 Signing Key
> 
>> As you can see signature E2986940 is unknown. I imported this key, it
>> belongs to "Kabine Diane <kabi...@me.com>"
>> This seems very suspicious. Should I delete the iso and try a fresh
>> download?
> 
> 
> Answered previously here:
> 
> https://groups.google.com/d/msg/qubes-users/xn08ib7QauA/4s4yfcUgBwAJ
> 
Sorry to waste your time. I should've researched the issue more
thoroughly before posting
> 


-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/b1543a91-198f-a8d8-58dc-b65c21f12527%40riseup.net.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Debian-8 Update Hangs

[amadaus]

In Qubes OS 3.2 rc2 updating Debian 8 via VM Manager and the terminal
resulted in failure - it hangs forever. Consequently I tried a fresh
install of OS 3.2 rc3. I successfully uddated Dom0, Fedora23 and Whonix
templates BUT when it came to Debian-8 it stubbornly refuses to update.
Anyone any suggestions as to what I'm doing wrong.
PS the command i'm using in terminal is: sudo apt-get update && sudo
apt-get dist-upgrade.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/nrjjh4%24h5v%241%40blaine.gmane.org.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] R3.2_rc3.iso Corrupt Download?

[amadaus]

I have downloaded Qubes R3.2-rc3 iso and in the course of verifying
signatures received the following output:
[user@rubbish ~]$ gpg -v --verify
'/home/user/Downloads/Qubes-R3.2-rc3-x86_64.iso.asc'
'/home/user/Downloads/Qubes-R3.2-rc3-x86_64.iso'
gpg: armor header: Version: GnuPG v2
gpg: Signature made Wed 31 Aug 2016 01:08:18 PM BST using RSA key ID
03FA5082
gpg: using PGP trust model
gpg: Good signature from "Qubes OS Release 3 Signing Key"
gpg: binary signature, digest algorithm SHA256
[user@rubbish ~]$ gpg --list-sig 03FA5082
pub   4096R/03FA5082 2014-11-19
uid  Qubes OS Release 3 Signing Key
sig  36879494 2014-11-19  Qubes Master Signing Key
sig 3E2986940 2016-01-04  [User ID not found]
sig 303FA5082 2014-11-19  Qubes OS Release 3 Signing Key

As you can see signature E2986940 is unknown. I imported this key, it
belongs to "Kabine Diane "
This seems very suspicious. Should I delete the iso and try a fresh
download?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/nrglpa%24btn%241%40blaine.gmane.org.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Qubes 3.2(R2) USB Connecting to DOM0 by Default

[amadaus]

On 2016-08-11 18:50, Andrew David Wong wrote:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On 2016-08-11 05:08, amad...@riseup.net wrote:

My understanding is that by default Qubes Dom0 is protected from USB
attacks by disallowing access to USB's. To the contrary,on my system, 
USB's
have direct access to Dom0 - I plug in a usb -popup shows it's 
connected to

dom0 - i have direct access via dom0 to the files on the usb.

Is it just me? or it it a system failure?



Pleas read this page:

https://www.qubes-os.org/doc/usb/

Without a USB qube, the USB controllers are left in dom0, which sounds 
like
your situation. Depending on the version of Qubes you're using and 
whether
you're using a USB keyboard and/or mouse, you should have been prompted 
during
installation to create a USB qube. However, you can also create one 
yourself

by following the instructions on that page.

- --
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
-BEGIN PGP SIGNATURE-
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=ZISO
-END PGP SIGNATURE-

Thanks all for your input.
I do not recall being prompted to create a USB VM during installation of 
3.2 rc2. However, I've now successfully created one and it works fine. 
But I'm jittery that my system's integrity has been comprised by a 
compromised USB Flash stick.
I guess the only solution is to ditch my current VM's [including 
backups] and reinstall qubes?
It would be really good if the developers could modify their code to 
prevent users from accidentally falling into this unfortunate trap.


--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/f3841092408e675f540d60d26f102907%40riseup.net.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Qubes R3.1 hangs during boot

[amadaus]

For months now I've had an intermittent problem where qubes hangs during 
the boot process which then results in me having to power down.
The symptoms are: The system boots normally, I enter the disk password, 
which is followed shortly afterwards by the username/password dialogue 
box, after about 30 seconds or so the system hangs and I have to power 
down and reboot.


This never happened in qubes R2. I first noticed it during the beta 
editions of R3.
It seems to be getting worse - I've just had to reboot 6 consecutive 
times before finally getting into the system.


Anyone any ideas?

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/909e682c3f35c9b6de7b99bae8ede2a8%40riseup.net.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] R3.2 VM Recovery not possible?

[amadaus]

I backed up my VM's in R3.1 --> dom0 --> secondary hard drive [internal 
HDD] then attempted to recover them using R3.2. However its not possible 
as the drive does not show in the Qubes restore window.
In dom0 terminal id did qvm-block list and the drive and its backup 
partition is shown.

Can anyone help recover my backups?

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/a16bc6a5fc2628428c8eb30b859a2275%40riseup.net.
For more options, visit https://groups.google.com/d/optout.