I gave up on trying to make email secure...just too many variables.
Some ideas that help make it more secure include:
1) Go thru thunderbird and adjust setting (no image preview, plain text, etc...)
2) Get a few email addresses, one for shopping, one for friendamies, 1 for
business, 1 for friend
I used to be able to add "add-ons" to my -dvm's (e.g. HHTPS Everywhere, No
Script, etc...). I would periodically update these add-ons in the -dvm.
Recently I noticed an add-on needed update and when I went to update it, it
says it was no longer compatible? I knew enough to start the -dvm using
Rookie question:
1) Why I didn't discover this before I don't know, simply drag the program from
the Qubes drop down menu onto the desktop i.e. drag "Fedora-dvm-Firefox" or any
other app program onto the desktop for easy access.
Does this impact my Qubes security? It asked if I want to execute
Nice one Unman...thanks for this and your ongoing help! You rock...
(Kudus to Andrew and the Qubes team as well!)
--
You received this message because you are subscribed to the Google Groups
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to
I did your quick test...stopped fine. Good stuff...
Good Whonix-Qubes Links:
https://www.qubes-os.org/doc/whonix/
https://www.whonix.org/
Thanks all,
--
You received this message because you are subscribed to the Google Groups
"qubes-users" group.
To unsubscribe from this group and stop rec
I appreciate the follow up...I have that setup.
My concern is I have to trust the VPN provider...
I used to use Torbirdy in my Whonix-gw Thunderbird a while ago (Installed by
default) but it seems it "...is incompatible with Thunderbird 60.6.1...", at
least that is the message I get when I look
If I am using Whonix-gw and Whonix-ws on Qubes is there in a sense a Tor kill
switch in place by default? i.e. would Whonix-ws, if always connected to
whonix-gw, ONLY transmit data thru Tor? or if the Tor circuit breaks is the
data transferred thru clear-net...
Thx
--
You received this messag
I totally get the cert.issue, not sure any military wants to simply trust
DigiCert or any body else but they do provide keys to verify the .iso.
I got TENS running(surf the web) on Qubes but struggled to get USB,
Ctrl+Shift+C, etc... to work. I suspect Tails would be similar.
Depending on your
Thank you 3.2! You were a good OS...
--
You received this message because you are subscribed to the Google Groups
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email t
I haven't tried Tails on my Qubes but the default "-DVM" is close to TAILS but
the DVM does apparently keep some information...
Interesting, but I tried TENS once (Open source OS similar to TAILS developed
by the US Air Force Research Labratory): www.spi.dod.mil/index.htm
There tech support was
I am not sure of why this is happening in your case but have you tried creating
a new -dvm again? Does the issue persist?
--
You received this message because you are subscribed to the Google Groups
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an
I just donated a small amount...not much but all I can right now. I would
encourage others if you can...both Qubes and Whonix do good work!
Maybe someone can clarify and help. I have been using Qubes for a while
favoring Whonix when I can.
My understanding is:
The -gw and -ws templates, -dvm,
Steven Walkeer...unman knows his $hit. I stand corrected...he has helped me a
lot...
haaber/unman...any chance you could break down your direction? What would be
the commands to install lets say:
LibraOffice into a Debian template? I have used Protonmail bridge on whonix and
debian and have on
PS...thanks for the correcting me!
--
You received this message because you are subscribed to the Google Groups
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to
Steven,
I am going to assume you have created an AppVM i.e. a Qube based on a Template
(vs a Stand alone VM). In this scenario you would install any software into the
template.
Instructions:
1) I would suggest you clone your Fedora-29 template so you have a clean
template. This is key as insta
...always forget something right after hitting "Post":
Similar to Stuart to avoid a borked update which happens(although rarely these
days) I:
1) Back up my data prior to an update
2) I only update my original templates after updating the clones, if the clones
update OK I then update my origina
To answer the OP question you would use the clone for AppVMs, for example:
1) Original Fedora Template = I avoid using it
2) Clone of "Original Fedora Template" = Vault AppVM
3) Cloned Template with Libre Office installed = Personal VM & for another
disposable VM for printing and opening email at
Important maintenece best practice:
...back up your data prior to updating dom) and your templates. I got burned on
that a while ago.
--
You received this message because you are subscribed to the Google Groups
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from
A clean install...you'll never feel more secure:)
A couple of best practices I would suggest include:
1) Clone your templates(maybe multiple cloned templates) and never install or
use your original templates (This will help keep them secure and if you screw
up on a clone you can always delete i
I still trust Whonix...but the aussies, well you still got to watch them
regardless! :)
--
You received this message because you are subscribed to the Google Groups
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to qubes-users+unsubscr...@g
Mus be the Australian government and the five eyes!
I tried it on a clone and it update no issues...tried it on my main templates
as-is/no change to http(fromhttps) and they happened to work fine.
Next time I will consider the option of waiting...
Xaver&awoked...you rock! Thx...
--
You recei
Thx...
That did it but if I just waited would it correct itself? Seems not so secure
to update via http?
Is one generally better off waiting for it to maybe correct itself vs updates
via http?
--
You received this message because you are subscribed to the Google Groups
"qubes-users" group.
As I see it Namem...no expert but I would say:
1)Yubikey most secure (I have seen other similar devices that might be more
secure)
2)Google Authenticator (also similar type apps that are non google are also
available
3) Text message (almost useless in my opinion but better then nothing)
In my e
I am not sure what the issue is but I am struggling to update my whonix
templates via the GUI, update icon(star icon) or manually??
I get an error similar to this:
Ign:1 http://ftp.us.debian.org/debian stretch InRelease
Hit:2 http://deb.qubes-os.org/r4.0/vm stretch InRelease
...
Err:12 tor+http:
Would appreciate any thoughts on your set-up but try the following:
In the appvm that houses your thunderbird and protonmail bridge add protonmails
IP(= 185.70.40.151) in the firewall settings. I have managed to get it working
by further limiting it to port 443 only.
As I understand the working
If you go to:
Qubes Icon -> System Tools -> Windows Manager -> Style Tab -> Theme
There you can pick different themes for your windows...I use "TGC" which shows
the icons pretty good(although not with black). "Sassandra" looks pretty good
with black...
--
You received this message because you
I am sure there are different opinions out there, but my thoughts would be:
1) Using a "cloud" account to sync is not as secure (somebody can get access,
change URLs in your book mark account and your potentially owned)
2) Using other 3rd parties is less secure (Personally I don't trust LastPass,
Worked like a charm!
Opened up "Konsole" in my whonix-14-gw and -ws templates
Ran this command:
sudo apt install python-concurrent.futures
I can now use the Sun/update icon to update my templates.
It seemes the benefits are:
Starts and stops each template automically, one at at a time
Can run
Just used this feature again...Debian-9, Fedora-29 and Dom0 updates(or lack of)
went fine i.e. My Fedora templates seemed to update and no updates were needed
for Dom0 or my Debian templates.
My Whonix-14-GW and -WS however did deliver an error that might be related to
what you refer to Marek.
I have never "upgraded" my templates...new template installs only, however over
time I too have seen distorted icons including:
* Looks like 2 icons on top of themselves
* Very "Red" icon for sys-net that also is a little difficult to see signal
strength...
Just thought I would add my insight..
Just played around again with the sun icon, this time starting my whonix-gw
template used for template updates prior, a couple of observations:
Seems to work fine when updating Debian and Fedora 29 templates, at least the
messages I get in the details appear positive, listing the updates/changes
I just had another Dom0 update today...just tried the "sun icon" again and the
behaviour was a little different in that it launched my sys-whonix vm this time
for an update.
Notes:
1) Prior to my dom0 update today, the "sun icon" had always given me a "nothing
to do" with out ever starting sys-
Thanks 799...I learned something!
Similar to 799 but less hardcore...I always download a fresh template(vs
upgrade). In my case I ran with a full/fresh Fedora-29 after the Fedora-28
hplip issues, and added any new software from fresh:
https://www.qubes-os.org/doc/templates/
--
You received th
In case the above links dont work:
>
> Dom0 error:
https://groups.google.com/forum/#!topic/qubes-users/NSVB-s1zHCI
>
> Fedora 28 error:
https://groups.google.com/forum/#!topic/qubes-users/gKxaTiQ3iZg
--
You received this message because you are subscribed to the Google Groups
"qubes-users" gr
Just to dovetail Hugo, here was a similar discussion that included a few
alternatives:
https://groups.google.com/forum/#!searchin/qubes-users/librem%7Csort:date/qubes-users/bu2jW28UJAY/Te-Z2y5GCAAJ
--
You received this message because you are subscribed to the Google Groups
"qubes-users" group
Not sure this explains your particular issues but:
Dom0 error:
https://groups.google.com/forum/#!searchin/qubes-users/22rip%7Csort:date/qubes-users/NSVB-s1zHCI/U-HCRz5uFAAJ
Fedora 28 error:
https://groups.google.com/forum/#!searchin/qubes-users/fedora$2028$20error$20update%7Csort:date/qubes
After a recent update to Dom0 an icon appeared on the top right. Been playing
with it for a few weeks and I am struggling with the following:
1) It check for updates via sys-net even though I use sys-whonix for updates? I
read some where there is a way to change this so it uses whonix which is m
Same thing here...no answers/solutions but your not alone!
--
You received this message because you are subscribed to the Google Groups
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to qubes-users+unsubscr...@googlegroups.com.
To post to th
I read the original link again, seems the update to Dom0 patches the issue, I
also changed my default DVM (Qubes Manager->Systems->Global Settings->Deafault
DispVM) to my more secure dvm, changed my "default-mgmt-dvm" template to a more
secure template, changed appvm disposable DVMs as needed...
I just moved to fedora-29(due to update issues with 28), full version and
everything seems to be working fine.
A while back I had issues with wifi connecting and used the following command
in my fedora template:
sudo apt install firmware-iwlwifi
sudo apt update && sudo apt upgrade
My wifi then
Strange but I just noticed default-mgmt-dvm for the first time?
After noticing this I noticed that one of my less trusted templates was being
used as the template for default-mgmt-dvm. In this less trusted template I had
browser add-ons, libre office, print drivers in addition to other less trus
Sorry for the basic question, but was wondering if some folks could help me out
with some housekeeping and best practices:
My understanding is you would enter the following commands into the template
terminal:
Debian:
sudo apt-get update && sudo apt-get dist-upgrade
Fedora:
sudo dnf clean al
Some typos corrected and clarification added:
John,
I'll take a shot at helping but would defer to Unman who has helped me out a
lot, both directly and indirectly on this forum.
Some notes:
Been using 3.2 and 4.0 only...haven't tried 4.0.1
Not an expert but have having been using Qubes as my pr
John,
I'll take a shot at helping but would defer to Unman who has helped me out a
lot, both directly and indirectly on this forum.
Some notes:
Been using 3.2 and 4.0 only...haven't tried 4.0.1
No an expert but have having been hacking my way thru Qubes to make it my
primary
I loaded 4.0, howev
FYI...I found this link which indicates ""Whonix is set to UTC...". I tried
restarting sdwdate-gui yet emails show UTC time?
Is it just to be expected that when using Thunderbird in Whonix 14 that emails
will now be received on UTC time going forward(vs my local time)?
--
You received this mes
I have been using Qubes 3.2 and 4.0 for a while now. When I installed Qubes I
needed to put the time on my BIOs 6 hours ahead in order for the clock on my
desktop to be accurate. Worked fine for the past few years...TOR worked, time
on emails looked inline using Debian9 thunderbird...
I recentl
Has anybody set this up with Whonix in Qubes 4.0? Are you willing to share
instructions and opinions?
I have managed to get this setup with a debian template/appvm but wanted to
explore doing this within a Whonix template/appvm? The bridge is only in "beta"
today and they email the instructions
Thank you Ahmed that worked greatreally appreciate the help!! Unman as
always thank you...
--
You received this message because you are subscribed to the Google Groups
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to qubes-users+unsubs
Thank you Patrick! Really appreciate the work you do...
--
You received this message because you are subscribed to the Google Groups
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to qubes-users+unsubscr...@googlegroups.com.
To post to this
At the risk of revealing my skills could I ask how to do that more specifically?
In dom0 terminal:
sudo
then what?
Thank you for any one willing to share the basicseditting a file comes up a
lot and don't know how to do it.
--
You received this message because you are subscribed to the Goo
Thanks...I am away from my Qubes but will try! Thanks!
--
You received this message because you are subscribed to the Google Groups
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to qubes-users+unsubscr...@googlegroups.com.
To post to this g
Adam,
Here is a list of hardware that has been tried with Qubes, try to pick a
computer with greens for 4.0(most recent Qubes OS):
https://www.qubes-os.org/hcl/
Not sure you have read this link but this was a note from the list above...its
close to yours. Not usre of the difference between the
Interesting Otto...can you elaborate on the files you changed? I had this
working at one time but then broke...I never managed to get it working.
What files did you change? The config files?
Any specifics for a newbie would be appreciated and likely appreciated by
others.
Thanks,
22Rip
Thanks for the response but I did manage to change the "Dom0 UpdateVM" via the
GUI (System->Global Settings->"Dom0 UpdateVM"), however my understanding is
this only updates Dom0.
I am trying to change the UpdateVM for all my templates...they are currently
using the old sys-whonix. I want to cha
I recreated a new Appvm for my templates to use for updates. I currently use
sys-whonix...the new template is sys-whonix-New.
How would I do this?
I have Qubes 4.0 and have been using Whonix 14...
Thanks again to all for any help,
22Rip
--
You received this message because you are
I agree it is good to see the smaller manufacturers making efforts...the market
is clearly for Gaming. I would love to see a security centric offering though.
I tried sending a note to Majora, they have a Forum and a Feedback link. I sent
them a note on the feedback link but it just clocks...I d
I had problems trying to upgrade as well...I ended up doing a fresh install,
during the install I selected Whonix NOT to be installed.
After the install I then added Whonix-14 (I didn't have to delete the old).
Did this a while ago and have updated a few times with no issues...
Bit of a sledge
Bernhard...keep in mind I am no expert but I have managed to get 3.2 and 4.0
working(Not on a DELL) but here are some thoughts:
1) Look thru your BIOS settings I found I had to tweek them to get my system
installed.
2) Did you run 3.2 on this machine and are now upgrading to 4.0. If not I would
Unman your posts have been extremely helpful to me and I can't thank you enough
for the help(I am sure many others would agree).
However I think your "..Pretty easy to maintain.." would be hell for me.
Librem(and maybe the Majora line) have huge appeal for me as they take care of
the BIOS flash
Interesting and very coolEuro laptop! Seems intriguing but I could not find
some of the questions I was wondering:
1) Are the BIOS proprietary? Same as Librem..
2) Has the manufacturer said it is compatible with Qubes? Seems they would want
to test this themselves.
Have you reached out to t
Thank you both for the comments...
In the message I remember a statement: "..This menu allows you to
select...automatic run for, if any...running grub-install automatically is
recommended". I believe it also said something to the effect: "...will use the
previous selection..."
Considering I a
d
taken screen shots.
Was I supposed to select something? Any way to check? What was the window?
I am using 4.0...
Thanks again,
22rip
--
You received this message because you are subscribed to the Google Groups
"qubes-users" group.
To unsubscribe from this group and stop receiving ema
Tough questions and discussion but in the spirit of finding the "best" we can
get laptop for Qubes 4.0 (Best being defined as: available to purchase, priced
right, most open, most "reasonably" secure and"reasonably simple" to
maintain), for me I see the following as my best options, ranked:
Thanks vonder...good resources.
I carefully did nothing...tried again today and no issues. No issues and no
updated needed...
Thanks again, Vonder, Qubes team and Whonix team!
--
You received this message because you are subscribed to the Google Groups
"qubes-users" group.
To unsubscribe from
I recently installed Whonix 14 following these instructions:
https://www.whonix.org/wiki/Qubes/Install
Everything went well and to the best of my knowledge I was able to update the
whonix -ws and -gw using the GUI. This was last week...since then I have
updated Dom0, Fedora and Debian templates
Thanks Chris...I understand now. I just tried it again and below are my logs,
while I don't get the "Operation not permitted (code=1)" error I still get the
TLS error
Fri Sep 14 16:55:06 2018 library versions: OpenSSL 1.0.2l 25 May 2017, LZO 2.08
Enter Auth Username: My username
Enter Auth
Thank you Anac and Chris, appreciate your suggestions:
You said that Tor was running. When combining Tor with VPN, the VPN's
connection type should be TCP, not UDP. Did you check that?
I did check this...opened the connection to Any/Any but this didn't seem to be
the issue. I also eliminated TO
Thanks again for the help Chris...see my notes below:
IIRC you only need to specify the IP address of a regular system
interface, which in this case is eth0. So do a 'sudo ip addr' and look
up the eth0 'inet' address and put 'local ' in the config.
There's a chance this might work.
- Unfortunatel
Thank you both for your responses...fair question John but I am the OP, lost
access to my old tutamail. Yes my VPN was working fine for a few months however
with a recent update it broke?? Its a little concerning because I did both a
Debian and Dom0 update. When trying to update Dom0 I was not a
It appears as if I am getting a TLS error? Why would this suddenly start?
Wed Sep 5 17:23:39 2018 TLS Error: TLS handshake failed
Wed Sep 5 17:23:39 2018 SIGUSR1[soft,tls-error] received, process restarting
Wed Sep 5 17:23:39 2018 Restart pause, 5 second(s)
Wed Sep 5 17:23:44 2018 TCP/UDP: Pre
Correctionmy TOR is working. Any ideas how to trouble shoot?
Everything has been working fine, however recently my VPN tunnel is failing?
I ran: sudo journalctl -u qubes-tunnel
and I get:
Sep 05 10:17:48 VPN-Mid qtunnel-setup[1138]: Wed Sep 5 10:17:48 2018 All
connections have been conne
Everything has been working fine, however recently my VPN tunnel is failing?
I ran: sudo journalctl -u qubes-tunnel
and I get:
Sep 05 10:17:48 VPN-Mid qtunnel-setup[1138]: Wed Sep 5 10:17:48 2018 All
connections have been connect-retry-max (7) times unsuccessful, e
Sep 05 10:17:48 VPN-Mid qtun
My thoughts would be:
1) You might want to create a specific AppVM for your passwords/keepass only.
Don't store any other documents in this AppVM.
2) Use a minimal template for the above AppVM, Fedora has a minimal template
available for download and the stock Debian template is already pretty
I too was a rookie with minimal experience...still consider myself a rookie in
this group! PGP is incredibly complex and I have to admit I still struggle.
The gist of what your are trying to do is compare "numbers and letters" from 2
files, which verifies "authenticity and integrity" of your do
74 matches
Mail list logo
