[qubes-users] Re: Qubes 4.2 installation problems due to Salt alone - what to do?

[Catacombs]

Hmm,  You might find it more useful to join the Qubes Forum, 

https://forum.qubes-os.org/

I wanted to reply, so you felt someone will help.

Perhaps Clarify some things.

Seems from your discussion of SALT, you know something of Linux.  

If the standard install did not finish correctly.  I am not thinking 
whatever is going on with SALT is the problem.  But SALT commands might 
reveal to some what is happening?
So, for me in your situation, I would go through the detail of what I 
assumed was true, but might not be.

Can you clarify.
Why are you sure the computer in question is compaitble with Qubes?  Have 
you used Qubes on it before?
Did you install UEFI or Legacy?   I use Legacy, UEFI is a different set of 
problems.
Does your computer have one or two drives?  (I have one computer, with two 
drives, that will only let me install Qubes to one drive, and the other 
drive must not have anything on it.  Other computers don't care.  and I did 
not say it made sense)
Are you trying to accomplish a dual boot?  (Qubes wants to be alone on the 
drive.   Some folks have gotten dual boot to work.  I have not tried)

Did you try to install Qubes on a drive that already had -something?  
(I have discovered that sometimes Qubes does not like to installed over 
something else.  Sometimes does not care.)

Can  you devote this computer to using Qubes right now?   Or is it a 
computer you use daily with another OS?
(helps to limit suggestions to something that is more reasonable for you to 
try)

I think someone more knowledgeable than myself will come by and recognize 
your symptoms, and you don't have to worry about answering this.  But it 
can't hurt.  

In a coupla days, If you have not gotten it going, I will come back and add 
more suggetions.   More confusion.  

but someone might recognize symptoms and make an easier fix.  

Cheers.


On Sunday, April 14, 2024 at 12:58:26 PM UTC-4 Michael Singer wrote:

> Dear Qubes Community,
>
> I am trying to install Qubes 4.2. in vain, not because the hardware is 
> incompatible, but because of Salt problems. I verified the downloaded ISO 
> according to the instructions, burned the ISO with various programs on a 
> USB stick, among others with the DD command:
>
> > dd if="./Qubes-R4.2.1-x86_64.iso" of="/dev/sda" status="progress" 
> conv="fsync"
>
> I have checked the result and it shows that the hash sum of the USB stick 
> under /dev/sda is the same as the downloaded file:
>
> > sudo dd if=/dev/sda bs=1M count=$(stat -c %s 
> /home/user/QubesIncoming/XXX/Qubes-R4.2.1-x86_64.iso) iflag=count_bytes | 
> sha256sum
> > a942911a3a4975831324a064f70b34c6965c4e9f6c95afbc531f04d55f947376
>
> When I start the computer with the USB stick and test the medium, the 
> following appears first:
>
> > Fragment sums: 2695f8d1(...)
> > supported iso: no
>
> Then, when the test has run 100 percent, the following appears:
>
> > [FAILED]
>
> If I install anyway, I have to cancel the automatic creation of sys-net, 
> sys-usb and personal AppVMs, because otherwise I get an installation error 
> because the installer does not set the PCI devices to disable strict reset. 
> At the end of the setup it still says:
>
> > "initial config failed", see /var/log/salt/minion
>
> The log there says:
>
> > Specified ext_pillar interface qvm_prefs unavailable
>
> And when I try to update dom0, it fails. The reason is noted in the same 
> log file:
>
> > Unable to detect release version
> > Cannot prepare internal mirror list: SSL peer certificate or SSH remote 
> key was not OK for https://mirrors.fedora(...)
>
> Everything otherwise works according to the HCL report, including Suspend, 
> Ethernet, USB, Speaker. Strange thing was that no default-mgmt-dvm seemed 
> to be present and was not started during update attempts.
>
> I have already tried the installation with 4.2.0 and 4.2.1, with standard 
> kernel and with the latest kernel.
>
> How could I solve the problem?
>
> Thank you,
> Michael Singer
>

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/df925c81-1683-4cff-b183-aaeb36ea49ben%40googlegroups.com.

Re: [qubes-users] Configure Network Qubes 4.2

[Catacombs]

I am sorry I was slow to reply.  I was having problems today, apparently 
from the large solar flares we have been having the last several days.  

Some of it is reflective of a earlier version, but
 https://www.qubes-os.org/doc/


On Monday, March 25, 2024 at 5:12:23 PM UTC-5 Catacombs wrote:

> HI,  Not exactly sure if this is what you want.  
> It is an excellent question for a newcomer.
> Upper right hand side of screen.  Red, 
> Two red terminals.  Click on this.  
> What do you get?
>
> On Monday, March 25, 2024 at 11:43:31 AM UTC-4 Bapak Ireng wrote:
>
>> Sorry, i discuss in the Qubes Communityfaster responses, better 
>> systemthen google groups
>>
>> Bapak Ireng schrieb am Montag, 25. März 2024 um 16:32:33 UTC+1:
>>
>>> i tried sudo /usr/libexec/initial-setup/initial-setup-graphical
>>>
>>> and the following is the output / result:
>>>
>>>
>>>
>>>
>>> i tried to sent pictures, but google did not let me sent them. Sh
>>>
>>>
>>>
>>>
>>>
>>>
>>>

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/c24bc1d4-6648-430e-8c27-528ba31c73f1n%40googlegroups.com.

Re: [qubes-users] Configure Network Qubes 4.2

[Catacombs]

HI,  Not exactly sure if this is what you want.  
It is an excellent question for a newcomer.
Upper right hand side of screen.  Red, 
Two red terminals.  Click on this.  
What do you get?

On Monday, March 25, 2024 at 11:43:31 AM UTC-4 Bapak Ireng wrote:

> Sorry, i discuss in the Qubes Communityfaster responses, better 
> systemthen google groups
>
> Bapak Ireng schrieb am Montag, 25. März 2024 um 16:32:33 UTC+1:
>
>> i tried sudo /usr/libexec/initial-setup/initial-setup-graphical
>>
>> and the following is the output / result:
>>
>>
>>
>>
>> i tried to sent pictures, but google did not let me sent them. Sh
>>
>>
>>
>>
>>
>>
>>

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/2bc3dbd0-2f6c-4e43-a411-1eac28bbe359n%40googlegroups.com.

[qubes-users] Re: problem with 4.2 rc5 installation source

[Catacombs]

hi,   sorry if it was wrong, but I sent your home email from a proton 
account.  It might have gone to spam.

The Qubes OS group just released Qubes 4.2 Final, which might accomplish 
install more ---directly.

I usually haunt the Qubes Forum.https://forum.qubes-os.org/, where you 
might get more responses to your questions.  

Besides from getting your current laptop to work with the latest Qubes 4.2 
Final (released yesterday).  and doing so for kinda of experiment.  And i 
say this for others reading this post besides you:   is to purchase a 
laptop which is well known to work with Qubes.

The Lenovo Thinkpad X-230  or  Thinkpad X-430.  Yes one must get at least 8 
GB RAM, and it is an old processor (third generation Intel)  But you can 
probably acquire one for two hundred (American) dollars.  in nearly any 
country in the world.  Those who need an inexpensive can buy one of these 
and modify it to be a very secure computer by installing Heads to verify 
tampering.  If one looks at the website of Insurgo, he provides the details 
of what he does to modify these computers.These modified Lenovo 
Thinkpad X-230, or X-430.are sold by Nitro Key with some offerings of 
the later hardware of their own build.  In addition, Purism, Librem sells 
new laptops meant to be used with Qubes.  Puri , it is rumored, is about to 
start selling a new model.   

Documentation.   As the Qubes 4.2 Final is just out, the effort to 
-re-create documentation is underway.  Much of Qubes discussions, (I read, 
is now on Git-Hub, rather than the Forum-Qubes.  

Qubes OS , by design, keeps some devices, like camera, laptop internal 
microphone and such from being available to a Qube unless the computer 
operater  specifically authorises it.  I have not heard of any one who 
wanted to connect those things via USB.   Keeping in mind that USB is 
considered a security hazard, plus it is likely no security expert ever 
audited the specific device you are connecting,  USB Camera.  USB 
Microphone.  and so on.  USB Hub having the potential security risk.  Some 
might say a USB mouse as well being a security risk.

Someone emailed to me, he knows a lot of journalists, and none will use 
Qubes because of, it is more of a hackers thing.  If one has like a 
University degree in Computer Science, using Qubes is likely pretty easy to 
understand, and perhaps use.  For a Journalist, well, they think different, 
and lack a lot of hacker training.  

If an individual is a Human Rights Defender, one might use "The Anonymous 
Incognito Linux System"  Tails OS. https://tails.net/

However some might say that by getting on Tor, in some countries, marks the 
person logging into Tor to the government surveillance.  Then mistakes in 
using Tor would further risk. . . .   yes, I have heard of Tor Bridges.  
but I would guess that Authoritarian Government surveillance minders 
constantly mine Bridge login locations.   I read of some fellow who used a 
bit of software to establish , on a server outside his country to create 
his own personal login start.  I would hesitate to give explanations 
because of the risks involved.  in that as well...

I was told that many of those in Chinese Prisons posted their statements 
negative to their society, posted them on Facebook.  Some governments have 
a low tolerance for criticism.

I would hope that the new documentation for Installing Qubes OS, would 
include a wiki of Troubleshooting,  what to expect from the install when.  

Most of my easy installs were to computers in 'Legacy Mode'  UEFI installs 
can seem problematic, but since I have no experience with that.  

Keep in mind.  Qubes OS expects to be installed as the only OS on the 
computer.  No sharing.  Qubes OS is installed what is called bare metal.   
If you are trying to do some kind of dual boot, you might get it to work.  
But it might entail more work.  I read that it is a security issue if there 
is another OS on the same computer.  Keep in mind that there is now malware 
which installs to the boot of the computer.   There is also LOGO-fail 
malware.  

Check for you model on the HCL,  "Hardware Compatibility List"  
https://www.qubes-os.org/hcl/  to see if there is any discussion of issues, 
how they could be solved.  Sometimes it is a matter of a directive  the 
graphics card requires..

Go through the requirements of the computer you have with the list.  If I 
has virtualization enabled.  Test it ,  somehow.  I found I had computer 
where, while the BIOS/EFI had the virtualization turned on.  I had to 
restart it like three times to get, the OS I had installed to test 
Virtualization, to acknowledge it.  Might have been the OS, not the BIOS.  
But I could take it off my list.   

There are several things to try if your computer is not a Legacy install.  
Like I said, I have not used UEFI, and my computers secure boot system 
turned on.  I think there is a specific program to write the boot before 
starting install.  in Git-Hub.  and an 

Re: [qubes-users] Problems with announced Fedora 35 templates

[Catacombs]

With Fedora 34 having reached EOL now, is there anything else I can do, 
other than a complete new installation of Qubes OS R4.1 ? 

With kind regards,

Viktor

 
HI, I am not an extremely knowledgeable Qubes user, but, I did not want 
your post to go on like no one cared.  I am pretty sure the developers do 
care, they just need to spend their time working on --- stuff.  And that 
might include exactly what will be helpful to you.

I had some problems installing and using Fedora 35, and then updating it 
later.  Sigh.   

When I originally installed Qubes 4.1, I chose the option to update over 
Tor.  Used to be I needed to start the Tor Browser for that to work.  If 
nothing else, Tor Browser downloads really slowly.  I once started to 
download an iso of like a gigabyte, and it would take hours.  I am 
suggesting that in some cases, trying to download can have timing issues 
where some things drop out.   And I can guess the system set up by our 
Qubes developers is not supposed to do that.  and I can not prove that it 
does.   Just when it rains here.  My connection hiccups.   I am just 
tolerant and try again.

I like the solution I think the developers are working on right now. 

https://github.com/QubesOS/qubes-issues/issues/7544

Which explains itself.



>

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/ba2ce0fc-e567-4867-a95b-d787b863e2ecn%40googlegroups.com.

[qubes-users] Re: Witch one is the best?

[Catacombs]

 


And the second one never put on the web:

Silitech

Intel(R)  Core(TM)  i5-3450 CPU @ 3.10 GHz   3.10GHz

Mémoire 16.0 Go ram

Système d’exploitation 64 bits

Windows 7 Familiale Premium
This sounds like it is a similar to a Lenovo X230, which is the only PC 
which the Qubes website names as a Qubes Certified hardware, although it 
has some other changes, like installing Core Boot.  

Reasons for that are on the Qubes site.  
https://www.qubes-os.org/doc/certified-hardware/

Lenovo X230 runs more slowly than one would like.  Then again, it makes use 
of a PC that you are not, apparently using.   It is a good place to get 
ones feet wet.   Likely fewer install issues.  With the Lenovo X230 beware 
of upgrading the MOBO Firmware, the later versions will lock it against 
doing some things that you may choose to do in the future.   Such as 
install Core Boot, or running a program 1yvrain to .

Best Wishes


On Friday, August 21, 2020 at 8:18:57 PM UTC-5 meta...@gmail.com wrote:

> Hi, I new here and i im a french person. So excuse for my english.
>
> I want to know witch one in my pc are the best for Qube and witch version 
> of Qube.
>
> the fist one i use evreday:
>
> Amd Athlon(tm) II X4 645 Processor 3.10 GHz
>
> Mémoire 4 Go ram
>
> Système d'exploitation 64 bits, processeur x64.
>
> Sur Windows 10 pro.
>
> Carte graphique  NVIDIA GeForce  8400GS
>
> PC ACPI processor x64
>
>
> And the second one never put on the web:
>
> Silitech
>
> Intel(R)  Core(TM)  i5-3450 CPU @ 3.10 GHz   3.10GHz
>
> Mémoire 16.0 Go ram
>
> Système d’exploitation 64 bits
>
> Windows 7 Familiale Premium
>
> Carte graphique  ADM Radeon HD 7470
>
> PC ACPI x64-based PC
>
>
> Thank a lot! 
>

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/633a8152-6b48-44e8-bfb4-e2011f90f7d4n%40googlegroups.com.

[qubes-users] Re: Witch one is the best?

[Catacombs]

 


And the second one never put on the web:

Silitech

Intel(R)  Core(TM)  i5-3450 CPU @ 3.10 GHz   3.10GHz

Mémoire 16.0 Go ram

Système d’exploitation 64 bits

Windows 7 Familiale Premium
This sounds like it is a similar to a Lenovo X230, which is the only PC 
which the Qubes website names as a Qubes Certified hardware, although it 
has some other changes, like installing Core Boot.  

Reasons for that are on the Qubes site.  
https://www.qubes-os.org/doc/certified-hardware/

Lenovo X230 runs more slowly than one would like.  Then again, it makes use 
of a PC that you are not, apparently using.   It is a good place to get 
ones feet wet.   Likely fewer install issues.

Best Wishes

On Friday, August 21, 2020 at 8:18:57 PM UTC-5 meta...@gmail.com wrote:

> Hi, I new here and i im a french person. So excuse for my english.
>
> I want to know witch one in my pc are the best for Qube and witch version 
> of Qube.
>
> the fist one i use evreday:
>
> Amd Athlon(tm) II X4 645 Processor 3.10 GHz
>
> Mémoire 4 Go ram
>
> Système d'exploitation 64 bits, processeur x64.
>
> Sur Windows 10 pro.
>
> Carte graphique  NVIDIA GeForce  8400GS
>
> PC ACPI processor x64
>
>
> And the second one never put on the web:
>
> Silitech
>
> Intel(R)  Core(TM)  i5-3450 CPU @ 3.10 GHz   3.10GHz
>
> Mémoire 16.0 Go ram
>
> Système d’exploitation 64 bits
>
> Windows 7 Familiale Premium
>
> Carte graphique  ADM Radeon HD 7470
>
> PC ACPI x64-based PC
>
>
> Thank a lot! 
>

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/3f7c1723-d300-49d4-b8ee-ddbc0d1f85c3n%40googlegroups.com.

[qubes-users] Re: Installation error. Alienware M17 R3, I9 10thgen, rtx 2080, 32Gb ram

[Catacombs]

 "I knew the graphics was going to be an issue as it has always been with 
Nvidia. This time round though i'm at a loss." 

I am probably not as Linux savvy as you, just an experience which might 
give you insight.   I have been working on an Alienware 17 inch, Core I7 
Skylake processor, 16 GB RAM 512 M2, one TB spinning drive.  I have Legacy 
Boot.  I have experienced that I can Not boot after installing to the one 
TB spinning drive, but I can install to the m2, with a test Iso of 4.1 and 
boots, I still have a tab missing to do updates.   Guessing the link to 
updates is broken.I did find that it would not shut down when I was 
still connected to WiFi, I broke connection and it immediately shutdown.

I suspect there is an issue with the  Nividia Graphics card, and Qubes 
4.0.3, I read does not have support for that.  I think I had it working 
though many months ago, but the screen did not show the depth of color that 
Windows 10 had.

That being said, Alienware was not to meant to allow dual boot between 
different OS's, and as you know, the firmware has been dovetailed to 
Windows 10..  Qubes was designed to be the only OS on computer.  Still I 
have Legacy Boot.   

Right now I am using one of the test iso's of 4.1, which has a later kernel 
and a video driver for this Nividia graphics card.

There are several threads on different parts of this subject.   

Not sure what the status is of having an I9 10th generation.  

I doubt if it relates to your issue, I have a fresh install, and the button 
for update does not show up.   I don't see a common denominator to your 
issue.   and I am using a test Iso of 4.1 from about June.  Which is not 
trustworthy from a security stand point.   Keep hoping for a release of 
Qubes 4.1 with Fedora 33.   

I know our developers are very overworked.   I know the real solution to 
these things is to find a way for Qubes Project to have more money, a lot 
more money.   I live on Social Security, so I will not provide the solution 
to overworked, under compensated developers.  

There is another forum.   https://qubes-os.discourse.group\ 



On Friday, September 18, 2020 at 2:08:15 PM UTC-5 kaine wright wrote:

> I'm not completely new to Qubes OS and have it installed on inferior 
> machines before but due to hardware limitations always reverted back to 
> something lighter. This time though i have a pretty decent machine, it runs 
> windows in RAID0 and I have a 2230 form factor m.2 ssd with no raid and 
> this has ubuntu installed. My plan was to get rid of the ubuntu 
> installation and use Qubes. 
>
> I knew the graphics was going to be an issue as it has always been with 
> Nvidia. This time round though i'm at a loss.
>
> I've downloaded a fresh copy of 4.0.3 dd' using Linux and Rufus on 
> windows. Tried both without modification and neither worked. (This is using 
> both 16Gb and an 8Gb because of issues raised about anything higher than 
> 8). 
> Tried to losetup mount the iso but its not possible it complains about the 
> sector not being 512bytes and fails to mount. If i mount it any other way i 
> get the first partition which can not be modified. So only option is to 
> mount the second partition and manually edit; /mnt/EFI/BOOT/BOOTX64.cfg. 
> Remove lines noexitboot=1 and mapbs=1, try again and still failure although 
> i should mention the RGB keyboard does hold its color meaning the loading 
> has finished and something is open. Theres no response to ctrl alt f6 or 
> f2. it will respond to ctrl alt del and the power off button shutting down 
> the installation. One comment that did get me quite far but still jammed 
> the computer was to use a comments answer from QubesOS issue 5165 
> . This managed to 
> get a full but slow output that gave very few warnings until you get to a 
> dracut warning timeout script error. This will happen a few times and then 
> request you copy the error to a usb stick for viewing but at this point 
> nothing but a reboot is possible even after a half hour wait. 
>
> The usb installations are fine and even with the modified settings i can 
> install Qubes on an old machine lying around. Alienware's bios is a bit 
> tricky and it seems Legacy mode has been completely removed leaving only 
> UEFI. Secure boot is disabled but qubes install is unable to detect this. 
> So im kind of lost on what it is i should be doing. Blacklisting nouveau  
> drivers doesn't help much. 
>
> If anyone has experienced this or if i need to give further details please 
> let me know. Logs are difficult to get as they are unable to be saved due 
> to the crashing. 
>
> Warmest regards 
>
> Kaine
>

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion 

[qubes-users] Re: Installation error. Alienware M17 R3, I9 10thgen, rtx 2080, 32Gb ram

[Catacombs]

 "I knew the graphics was going to be an issue as it has always been with 
Nvidia. This time round though i'm at a loss." 

I am probably not as Linux savvy as you, just an experience which might 
give you insight.   I have been working on an Alienware 17 inch, Core I7 
Skylake processor, 16 GB RAM 512 M2, one TB spinning drive.  I have Legacy 
Boot.  I have experienced that I can boot after installing to the one TB 
spinning drive, but I can install to the m2, with a test Iso of 4.1 and 
mostly seems to work.

I suspect there is an issue with the  Nividia Graphics card, and Qubes 
4.0.3, I read does not have support for that.  I think I had it working 
though many months ago, but the screen did not show the depth of color that 
Windows 10 had.

That being said, Alienware was not to meant to allow dual boot between 
different OS's, and as you know, the firmware has been dovetailed to 
Windows 10..  Qubes was designed to be the only OS on computer.  Still I 
have Legacy Boot.   

Right now I am using one of the test iso's of 4.1, which has a later kernel 
and a video driver for this Nividia graphics card.

There are several threads on different parts of this subject.   

Not sure what the status is of having an I9 10th generation.  

I doubt if it relates to your issue, I have a fresh install, and the button 
for update does not show up.   I don't see a common denominator to your 
issue.   and I am using a test Iso of 4.1 from about June.  Which is not 
trustworthy from a security stand point.   Keep hoping for a release of 
Qubes 4.1 with Fedora 33.   

I know our developers are very overworked.   I know the real solution to 
these things is to find a way for Qubes Project to have more money, a lot 
more money.   I live on Social Security, so I will not provide the solution 
to overworked, under compensated developers.  

There is another forum.   https://qubes-os.discourse.group/



On Friday, September 18, 2020 at 2:08:15 PM UTC-5 kaine wright wrote:

> I'm not completely new to Qubes OS and have it installed on inferior 
> machines before but due to hardware limitations always reverted back to 
> something lighter. This time though i have a pretty decent machine, it runs 
> windows in RAID0 and I have a 2230 form factor m.2 ssd with no raid and 
> this has ubuntu installed. My plan was to get rid of the ubuntu 
> installation and use Qubes. 
>
> I knew the graphics was going to be an issue as it has always been with 
> Nvidia. This time round though i'm at a loss.
>
> I've downloaded a fresh copy of 4.0.3 dd' using Linux and Rufus on 
> windows. Tried both without modification and neither worked. (This is using 
> both 16Gb and an 8Gb because of issues raised about anything higher than 
> 8). 
> Tried to losetup mount the iso but its not possible it complains about the 
> sector not being 512bytes and fails to mount. If i mount it any other way i 
> get the first partition which can not be modified. So only option is to 
> mount the second partition and manually edit; /mnt/EFI/BOOT/BOOTX64.cfg. 
> Remove lines noexitboot=1 and mapbs=1, try again and still failure although 
> i should mention the RGB keyboard does hold its color meaning the loading 
> has finished and something is open. Theres no response to ctrl alt f6 or 
> f2. it will respond to ctrl alt del and the power off button shutting down 
> the installation. One comment that did get me quite far but still jammed 
> the computer was to use a comments answer from QubesOS issue 5165 
> . This managed to 
> get a full but slow output that gave very few warnings until you get to a 
> dracut warning timeout script error. This will happen a few times and then 
> request you copy the error to a usb stick for viewing but at this point 
> nothing but a reboot is possible even after a half hour wait. 
>
> The usb installations are fine and even with the modified settings i can 
> install Qubes on an old machine lying around. Alienware's bios is a bit 
> tricky and it seems Legacy mode has been completely removed leaving only 
> UEFI. Secure boot is disabled but qubes install is unable to detect this. 
> So im kind of lost on what it is i should be doing. Blacklisting nouveau  
> drivers doesn't help much. 
>
> If anyone has experienced this or if i need to give further details please 
> let me know. Logs are difficult to get as they are unable to be saved due 
> to the crashing. 
>
> Warmest regards 
>
> Kaine
>

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/2be7cb78-3aef-458f-9aa9-b304e670f521n%40googlegroups.com.

[qubes-users] Re: Has anyone had a qube compromised?

[Catacombs]

Seems like a good question, in that it goes to one of the ways I could 
shoot myself in the foot, and compromise all my security efforts.  

I thought the point was, after each use of AppVM, close it and start 
another AppVM.  That would make your question to be more like, if one of my 
AppVM Qubes was compromised, could it cause the compromise of any other 
Qube?   Especially could the compromise effect Dom0 or a Template VM?

Or could, having an AppVM being compromised, could it effect modem-router 
that would be there after I powered off and back on computer?

I am not sure.  



On Sunday, September 6, 2020 at 10:12:44 AM UTC-5 Demi M. Obenour wrote:

> In all of my time using QubesOS, I have never had reason to believe
> that a qube was compromised. Has anyone here had a qube compromised?
>
> Sincerely,
>
> Demi
>
>

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/5491f67c-87bb-4bf0-b70b-ccc8b40757c6n%40googlegroups.com.

[qubes-users] Latest download of Qubes is where?

[Catacombs]

Yes, I understand that the latest stable version is 4.0.3..

Just is, I am person who is kinda just fooling around, and I only have so 
many hours during a week for investigating Qubes OS.   My online ability is 
limited to public WiFi, and a small amount of Hot Spot from my phone.  It 
is easier for me to download an ISO, and install Qubes from scratch, than 
it is to try to do updates from the awkward position of my car while trying 
to read how to's to do a series of updates, and fixes to say Fedora 32 
templates.

I installed one of the 4.1 Qubes downloads.   Wondering where the later 
versions of Qubes, that are sorta working are hiding?  and how do I 
determine which one I want to download??

Question two:  I thought a few folks were going to try to make the 
beginning of using Qubes, after first install to be easier for Human Rights 
advocates, and Whistle Blowers.  I personally think of those folks being, 
not very geeky-techie types.   They have a low threshold of giving up on 
using a secure OS which is like Qubes.   Anyone know of whether anyone is 
working on an this project?

Thanks for whatever replies are made.


-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/3e3b5c71-be1e-4a10-8b87-7b27c05cc9f9n%40googlegroups.com.

Re: [qubes-users] Qubes-OS architecture.

[Catacombs]

On Sunday, August 2, 2020 at 6:35:03 AM UTC-5, Jason Long wrote:
>
> Why not a good document about it?
>
> Sent from Yahoo Mail on Android 
> 
>
> On Wed, Jul 29, 2020 at 2:19 AM, Andrew David Wong
> > wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA512
>
> On 2020-07-28 4:04 PM, 'Jason Long' via qubes-users wrote:
> > Hello,I found a pdf file about the Qubes-OS architecture but it is
> > for 2010 :(. Any new version? Tnx.
> >
>
> I take it that you're referring to the PDF available at the bottom of
> this page:
>
> https://www.qubes-os.org/doc/architecture/
>
> I'm afraid there is no newer version of that particular PDF. That was
> more of an initial design document. Now that Qubes actually exists and
> is under continual development, it has been largely replaced by our
> documentation and articles:
>
> https://www.qubes-os.org/doc/
>
> https://www.qubes-os.org/news/categories/#articles
>
> - -- 
> Andrew David Wong (Axon)
> Community Manager, Qubes OS
> https://www.qubes-os.org
>
> -BEGIN PGP SIGNATURE-
>
> iQIzBAEBCgAdFiEEZQ7rCYX0j3henGH1203TvDlQMDAFAl8gnUMACgkQ203TvDlQ
> MDDx1Q/8CqvFsxSM5DyL8N45xrcs8PFIKQDYmRqhZRFRkpPSSYpSDnzrXDzY490k
> +R7dnDxJVtgyieo3S88n8qXom51L83lfnQBjZC59hmKIZzNMmD1cjwktbTmMJAvH
> r6qizjCeHuQ16s84vtvZknESe4nPsDJnsNvw4Gs879OLha+zwC4fKYh24r9chlw/
> k5Az4cn4J5f2JBKi7qV9mNFrZT6zYXNPZO2KVhJN8Krgfyd5BAEVcHMtUMq0ugGG
> bbMIOxee/iKbsAEaK32kZsLEI0vD7oAWaKujI+nLw9pWgiD44hExRQA5kDa/eDSl
> lJ49TaXdYlxxZM4FoSkxQtb5ncNoJDxmN/QLoX2kDzLvymd13GtYYyFGvM8Oqsrs
> EOKnyPlTG/TNkbjHYiBPyTOmAwG2derejAn5xgSC6xq/CQ53ovBhdyuWYgubgJ+s
> Fhd2cW6epp1j0tX0w0apCan5JBHaNQFMk/ml9prLEl3L3b+hcjmkYMrwcqe3jDet
> zlMhq4wIy2udz8WDLOHe4qTVK4b4ekWDrddSNUxN4Kmb9bCL9uIxUHypyRSrcAHm
> 7yYAzfQ+LJmUVvy/mlsQEAiVgH82ekVmdQuynXkdA5h+qEs3H+zWUJdfb67SEMlV
> etMYjYAO50jWYlrhyuBs40yqVtjCEx7/+zkmfAEsUt/E0GkEW0k=
> =XRM1
> -END PGP SIGNATURE-
>
>
> -- 
> You received this message because you are subscribed to the Google Groups 
> "qubes-users" group.
> To unsubscribe from this group and stop receiving emails from it, send an 
> email to qubes-users+unsub...@googlegroups.com. 
>
> To view this discussion on the web visit 
> https://groups.google.com/d/msgid/qubes-users/6a7f8b97-fd3f-0d8c-9bc1-b88963b8a23d%40qubes-os.org
> .
>
> from  https://www.qubes-os.org/intro/   Not PDF, but






-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/521434a0-e90f-4415-8a56-36f22efdde6ao%40googlegroups.com.

Re: [qubes-users] External Fully Encrypted SSD Drive. What do you think?

[Catacombs]

>
> . 
>>
>
> If it's not difficult for you, can you recommend specific models that are 
> of the same quality and build level as the MacBook, or maybe even better? 
> Price 
> doesn't matter.
>
>  
>

I presume you are asking about which computer one might buy?   I will say 
some things, and hope someone more knowledgeable will come along and 
correct me.

I own a 2009 MBP, and using Qubes on it was problematic.  True it is older 
hardware and a different firmware than today.  Once I was speaking with 
person in a computer store, who is much more knowledgeable than myself.  We 
both agreed we loved Apple, its OS X, its method of doing support and we 
did not like it was way more expensive than other computers.He said he 
would never buy another Apple.  Price versus Security he would use Linux on 
a Windows type machine for better Security;.  Also one of the reasons Apple 
always "just Works," is that they are control freaks.  They want to limit 
the way their computer is used.   Although in 20010 when I called them 
after my MBP would not start after trying to use Linux, they never 
laughed.  They still had some of the original Apple mystique of people 
should be allowed to modify the device, a crafty kind of hobby.   

Today the Apple OS is used to keep all of ones personal files, media in 
sync across all of ones Apple devices.  Phones, Ipads, Computers, multiple 
family members.  Feels to me like a huge Security hole. and Syncing is 
another one of those innovations that is like constant update.  It presumes 
I have an always available high speed network to accomplish all that 
Syncing, Cloud activity.  But I don't use the later Mac OS.  

I thought I would come on here, and suggest alternative computers, and let 
others tell me why I am wrong.  and I probably am.  

One the Qubes WebSite there are a list of computers which has been tried 
for Qubes, and any things which do not work for any model.  You have 
probably seen it.  

First of all, My Opinion.  Qubes users seem to gravitate towards using 
laptops on the thought that if one has a fixed Internet Connection, that is 
less secure.  An ISP can completely capture the internet connection.  Kinda 
like AOL.  American On Line used to be an Internet provider where one 
logged into AOL, which watched everything the individual did, and passed 
that through to the internet.  

There is a Hardware Compatibility List:  Well, security says you should not 
use links I send you.  So I will not send you fewer links.  

Qubes webpage has  a list of Certified Hardware, which is computers they 
have approved to be used with Qubes.   Actually an older laptop, which has 
been modified.  They have two different suppliers, one is in Europe, the 
other in Canada.  The computer that has been modified is a Lenovo X-230.  I 
know that the Insurgo model, in Canada is very generous in describing all 
the modifications they have made to get it to be Certified.  I have tried 
to emulate those changes to an X-230.I have not gotten there yet.   

There is yet another thing.  The Lenovo X230, if you have one in that stuff 
you described, it is easy to remove and replace the drive.  I bought two 
128 GB SSD's for this at twenty something dollars each (oh I am in US) and 
therefore I can easily use different fully installed versions of Linux.   

To use Pure Linux on a Lenovo X230, one would need to install a driver for 
WiFi.  Easy for an experienced Linux user with an ethernet connection.   

Since there is some possibility you might have a Lenovo X230, I would warn 
you of some of the ways things it would be easy to do that would be wrong, 
I did them.   To detail my experience. 

I bought an Lenovo X-230 Core I5, 4 GB RAM online for about US $228.00.  I 
could not afford the Core I7.  I paid another hundred for 16 GB RAM.  

Now my mistakes:   I upgraded the BIOS/EFI to the highest level.   

Why it was a mistake.   The Lenovo X230 RAM comes with the Intel Management 
Engine security hazard.  That is, Intel Management Engine on the main 
processor had its own modem so Intel can install new Firmware 
instructions.   Someone said that no one has ever seen Intel try to 
reprogram the basic instructions.   One of the modifications made by 
Insurgo version of the Certified Hardware is to install CoreBoot in place 
of the standard Intel stuff.   

Lenovo further complicated my issues with their BIOS/EFI upgrade.  Which is 
best explained in the documentation for the jailbreak.1vyrain If the 
jail break is installed, one can use other batteries (for some functions) 
besides an official Lenovo Battery, and one can use a different WiFI than 
the one that comes installed by Lenovo.   Insurgo changes to a different 
open source WiFi Wireless Adapter.  The one supplied by Lenovo also has a 
driver inside the Intel Management Engine.   Meaning if one does not use a 
Wireless adapter that is one of the ones already inside the Intel 
Management Engine, it can not phone 

[qubes-users] Re: Qubes-OS nature.

[Catacombs]

On Saturday, July 4, 2020 at 2:40:58 PM UTC-5, Jason Long wrote:
>
> Hello,
> The Qubes-OS is secure in nature or just secure in Virtualization?
> How about the system resourced that it using by default?
>
> Thank you.
>

Qubes is secure in how one uses it.  I would prefer, that some of the more 
experienced on here point out a concise checklist of the "how to stay 
secure" with a list of don't ever do this, and think you are going to stay 
secure.  

There is an old saying,   'Encryption is usually broken in practice, not in 
theory.' Meaning people do dumb things while trying to stay secure.   Like 
in WW One, when they changed codes on the front lines, someone would lose 
their new code book, So command, after sending orders in code, would sent 
the same thing "in the clear" not encrypted.   Giving the code beakers a 
crib.  

Qubes security, order of how one uses it, is not just encryption.  

I repeat. Be great if one of the more knowledgeable created a concise 
checklist, "how to stay secure using Qubes."

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/0a5d0ed4-beee-47e7-ba76-574f2e365ad4o%40googlegroups.com.

[qubes-users] Re: Does qubes protect against all firmware viruses ?

[Catacombs]

On Tuesday, June 9, 2020 at 9:39:26 AM UTC-5, Catacombs wrote:
>
>
>
> On Monday, June 8, 2020 at 1:00:17 PM UTC-5, tomas.s...@gmail.com wrote:
>>
>> I understand, that Qubes compartmentalizes OS and parts of OS don't have 
>> access to other parts of the OS. So even if you had virus in your firmware 
>> of a network card, it wouldn't matter. I know firmware viruses are rare, 
>> but still better safe than sorry. I am looking for safe OS to do online 
>> banking from. If i use live usb of QUBES, does that protect me against all 
>> firmware viruses ? I wonder. Even there is like 0.2% chance of being 
>> infected with it. Also i can't disable all my disks in BIOS, could that be 
>> problem ? I mean if i use live-usb and don't boot my main OS, when usb is 
>> plugged in. So my main OS can't compromise Qubes. And even if disks were 
>> enabled and i boot up Qubes from live usb, i am not sure if it could get 
>> infected, because these viruses has to be loaded somehow right ? But if 
>> they are passively on the disk and you launch 2nd OS from live-usb, not 
>> sure if it could get infected like this. I wanted to dedicate my old pc for 
>> online banking, but Qubes doesn't work there.
>>
>
> You might rather look at those webpages which talk about "Threat Model."  
> Who you might be contending with.   There is, of course, the possibility 
> that what you are referring to is the fact Intel main processors have 
> modems which might allow Intel to change the firmware code without your 
> knowing it.  I have been told, by someone who is much more knowledgeable 
> about these things, that there are no instances of Intel ever having done 
> that.   There are some possible problems with USB Keyboards.  
>
> You might ask your bank.  I suspect in any case, what you might be more 
> interested in is reading about VPN's.   Some more expensive that others.  
> As someone said, don't trust a free VPN, they have to make their money 
> somewhere, still I use the free version of ProtonVPN.  
>
> Hardware that is produced with the goal of no Firmware intrusion includes 
> - https://puri.sm/  the qubes certified hardware,  
> https://www.qubes-os.org/doc/certified-hardware/,  notice the Hardware 
> Compatibility List,  https://www.qubes-os.org/hcl/
>
> I guess that is off the subject.  
>
> If you use a VPN-  My bank checks the IP of the address the login comes 
> from.  If the VPN server is say in New York, a thousand miles away, it will 
> not let me login.  Bank reasons I should have told them I was traveling.  
> You might find difficulty using Tor, or Whonix to login to your bank.  
>

I should mention, using a credit card can insulate you from risk.  The big 
risk of using a bank account is allowing someone to have the checking 
account number itself, the one on the bottom of all your checks.  

Puppy Linux has a number of Live versions which actually do not have a 
root, but whose security in the case of a bank account is derived from 
loading a new fresh version of OS at each re-boot.  If one completely power 
downs the computer after each bank session, and does not save the partition 
each time, then.  No way can software get in around you.  Installing a VPN 
to use with one of the distros of Puppy Linux can be problematic though.   
Puppy Linux has a friendly forum.  I think you might start with Easy OS, 
create a multi-save DVD.  Boot then do your banking, power down.   

Not perfect.  If you are a geek type, then use Qubes.  No doubt Qubes is 
superior in several ways. 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/3ca355e8-7fc2-4fe8-bb77-ddb507ff60e3o%40googlegroups.com.

[qubes-users] Re: Does qubes protect against all firmware viruses ?

[Catacombs]

On Monday, June 8, 2020 at 1:00:17 PM UTC-5, tomas.s...@gmail.com wrote:
>
> I understand, that Qubes compartmentalizes OS and parts of OS don't have 
> access to other parts of the OS. So even if you had virus in your firmware 
> of a network card, it wouldn't matter. I know firmware viruses are rare, 
> but still better safe than sorry. I am looking for safe OS to do online 
> banking from. If i use live usb of QUBES, does that protect me against all 
> firmware viruses ? I wonder. Even there is like 0.2% chance of being 
> infected with it. Also i can't disable all my disks in BIOS, could that be 
> problem ? I mean if i use live-usb and don't boot my main OS, when usb is 
> plugged in. So my main OS can't compromise Qubes. And even if disks were 
> enabled and i boot up Qubes from live usb, i am not sure if it could get 
> infected, because these viruses has to be loaded somehow right ? But if 
> they are passively on the disk and you launch 2nd OS from live-usb, not 
> sure if it could get infected like this. I wanted to dedicate my old pc for 
> online banking, but Qubes doesn't work there.
>

You might rather look at those webpages which talk about "Threat Model."  
Who you might be contending with.   There is, of course, the possibility 
that what you are referring to is the fact Intel main processors have 
modems which might allow Intel to change the firmware code without your 
knowing it.  I have been told, by someone who is much more knowledgeable 
about these things, that there are no instances of Intel ever having done 
that.   There are some possible problems with USB Keyboards.  

You might ask your bank.  I suspect in any case, what you might be more 
interested in is reading about VPN's.   Some more expensive that others.  
As someone said, don't trust a free VPN, they have to make their money 
somewhere, still I use the free version of ProtonVPN.  

Hardware that is produced with the goal of no Firmware intrusion includes - 
https://puri.sm/  the qubes certified hardware,  
https://www.qubes-os.org/doc/certified-hardware/,  notice the Hardware 
Compatibility List,  https://www.qubes-os.org/hcl/

I guess that is off the subject.  

If you use a VPN-  My bank checks the IP of the address the login comes 
from.  If the VPN server is say in New York, a thousand miles away, it will 
not let me login.  Bank reasons I should have told them I was traveling.  
You might find difficulty using Tor, or Whonix to login to your bank.  

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/9119a006-e9e5-4540-b6d3-3c572e383b11o%40googlegroups.com.

[qubes-users] Re: Help with "Missing Features HAP/SLAT/EPT/RVI, Interrupt Remapping"

[Catacombs]

On Monday, June 8, 2020 at 9:16:40 PM UTC-5, lugnut808 wrote:
>
> Hi all, 
>
> New user here, trying and failing to install Qubes R4.0.3 on a new Dell 
> Precision 3630 Tower with Xeon E-2288G cpu. 
>
> I verfied the ISO and wrote it to a USB stick with dd. 
>
> If I set the BIOS to boot from the USB stick in UEFI mode then I get 
> dump of registers and stack trace and it says "Panic on CPU 0: FATAL 
> PAGE FAULT" 
>
> If I set the BIOS to boot in Legacy External Devices mode, and boot from 
> the USB stick, the Qubes installer menu comes up. If I select "Install 
> Qubes R4.0.3" then I am offered the chance to select a language, after 
> which an error window pops up: "Unsupported Hardware Detected"... 
> "Missing Features: HAP/SLAT/EPT/RVI, Interrupt Remapping" 
>
> In the BIOS settings I had already ticked "Enable Intel Virtualization 
> Technology" and also "Enable VT for Direct I/O". It also does not seem 
> to make any difference whether I tick "Trusted Execution" in the BIOS. 
>
> I guess there is a possibility that there is a bug in the BIOS, I have 
> R2.3.1 installed. 
>
> Does anyone have any ideas? 
>
> Thanks in advance, 
> Chris 
>

I had the same error like this.   One might get this to work by rebooting 
several times.   I finally, (oh the shame) installed Windows 10, and 
upgraded the BIOS/EFI.   This led me to the point where I can not put Core 
Boot onto the laptop.  Still, I reinstalled Qubes, and the problem went 
away.  

Notice you could try some other live OS that uses Virtualization to see if 
it works there.   Or there is command to show whether these options are 
functional. 

What kind of Keyboard are you using.  I think a standard USB can be 
problematic.  When you were originally installing Qubes, you had several 
boxes you might check.  

One was to update only over Whonix (note I think I have to start the Whonix 
Qube, and then use the update on the upper right hand of the screen, or it 
does not work, and does not show an error message telling you why it does 
not work.  Although you get a red X after awhile telling you it did not 
work.  

The other box you could have checked had something to do with starting 
sys-usb with some thing else.  All I know about that is I did not know how 
to start sys-usb, which I needed for a usb wireless adapter.  I changed 
that during a re-install of Qubes.  

USB keyboards are somehow made difficult to use because they are a security 
hazard.   Might be an issue.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/ecc47543-bfdf-481c-91b2-2fdb13c268eco%40googlegroups.com.

Re: [qubes-users] Obtaining genuine Qubos installer

[Catacombs]

If the Corona Virus pandemic is over.  

Go to black hat convention in Las Vegas.  Collect PGP keys from those you 
decide you can trust.  Collect some DVDs of Linux ISO’s from those you trust.  

Maybe similar Hacking conventions in Europe.  

Where did get hardware?   I dunno. If I am really concerned about security.  I 
would not buy it and have it shipped to my name or address or anyone in my 
email or that I had ever called or texted.  Or pay for it where the payment was 
traced to me.   Where is crazy aunt Martha when I really need her.  She would 
be glad to help me in my paranoia.  She was like grandma.  Always believed in 
sharing.  

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/85261c19-0652-4d51-a1c2-10c95bfb5292%40googlegroups.com.

[qubes-users] Re: HCL - Lenovo Thinkpad t450s

[Catacombs]

On Wednesday, May 27, 2020 at 9:02:34 PM UTC-5, Mad Man with a Blue Box 
wrote:
>
> I would attach the HCL file but I cannot for the life of me figure out a 
> way to get it off the laptop or to get the laptop online.
>
> Anytime I try installing Qubes on this device it says errors and must be 
> an expert/developer to keep going.
>
> When eventually in the main desktop type area none of the VMs will start 
> no way of wetting up wifi or doing updates or anything.
>
> Many errors saying my hardware does not support IOMMU/VT-d/AMD-Vi and that 
> it failed to start an HVM qube with PCI devices assigned.
>
> So it seems this laptop I just purchased because it was suggested on your 
> HCL list by a few people must be significantly different than the one they 
> used as mine won't work at all for anything.
>
> Thanks
>
> MadMan__BlueBox
>
>
>
> Sent via the Samsung Galaxy S9, an AT 5G Evolution capable smartphone
>

I suspect you need to go into the computer setup.  Where you power on the 
computer, and press some function key.  The BIOS/EFI and enable the 
Virtualization.  That is what those error messages refer to.   

Someone more experienced than I will be along after awhile who is likely 
more knowledgeable in that exact computer.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/891994a1-fcf2-4b95-8184-4af5fb151335%40googlegroups.com.

[qubes-users] Re: Private Tor Bridge.

[Catacombs]

On Tuesday, May 26, 2020 at 8:39:27 AM UTC-5, Catacombs wrote:

Not sure if Qubes Users is the best place to bring this up.

As I look at the various means to get on the Internet, in risky 
situations:
Public WiFi.
Hotels.
A country which is involved in spying on its citizens. 

I notice that Tor has a means for "Bridges."  A Bridge being an IP 
Address that allow one to make a first hop to an IP Address that the ISP, 
or local server is not expecting, or blocking. 

My problem being that if one was in a place like China, then the 
government is surely trying to gather up all the Bridges which the Tor 
network has.  

Just generally, I see one could create a private webpage somewhere, and 
place on it the software to allow one to use it as one's own personal, 
private Bridge.  First hop out.  Then one could direct the software on the 
Server to - which ever. start a standard Tor, Connect to a VPN.  

It does require trusting where the server is one has put one's software 
on.  

Obviously, one could borrow the Software from Tor to create a Bridge.  
I did not mention it to Tor, because, as this is risky in several ways, Tor 
website will not publicly agree to help create this project.   Although 
some of their programmers might advise on how to minimize risks.  

And the implementation inside Qubes Network manager software -dom0 has 
its own special issues. 

Any comments?  / is this already on the list of suggestions for Qubes?


Hi, Qubes might not be the best Choice here.

But if you want to browse safely in the CLEARNET i would recommend a VPN 
Provider you can trust. https://thatoneprivacysite.net/
For Countries like China there is a Stealth VPN Option (OpenVPN over SSL or 
SSH) that works with the DPI in China.

If you want to visit also .onion sites you can Enter on your Tor Browser "a 
Bridge you trust." https://tb-manual.torproject.org/bridges/
Search Bridges over https://metrics.torproject.org/rs.html#advanced

Or search 
https://lmgtfy.com/?q=tor+browser+over+vpn+=1=dhttps://lmgtfy.com/?q=tor+browser+over+vpn+=dhttps://lmgtfy.com/?q=tor+browser+over+vpn+=dhttps://lmgtfy.com/?q=tor+browser+over+vpn+=dhttps://lmgtfy.com/?q=tor+browser+over+vpn+=dhttps://lmgtfy.com/?q=tor+browser+over+vpn+=d
- show quoted text -



 Perhaps I should have written my initial post better.  While all you, 
_DRX_ say about possible Internet Tunnel methods is correct, my first 
thought is that it leads a well organized, well funded group, which I 
assume the Peoples Republic of China (Red China) is, directly onto the 
cyber dissident.  A lot of Cyber Dissidents are in prison in China.  I 
presume that a lot of them did try to use Tor, or a pay for VPN. 

 I can hypothesize how the PRC goes about hunting Cyber Dissidents.  
Anyone, not given permission, by the security forces, using Tor, or a VPN 
is identified for scrutiny.  Actually at that point, just searching their 
home, computers is probably sufficient to find the evidence.   That is, 
criticizing the government will be treated as a crime.  Just like the 
Optometrist in Wuhan who tried to warn other doctors there is a highly 
contagious dangerous disease infecting people.   He was told to be quiet, 
then jailed.   His jail sentence apparently ended when the government could 
not longer deny the existence of a novel Corona Virus, and some noise 
outside China about the repressive policies of China. 

I doubt that many of the other cyber dissidents in jail will be freed 
because of pressure from outside China.  The US government does not much 
seem to support Human Rights under the Trump Administration.  Several years 
ago Trump wanted Twitter to ban anyone who was critical of him or his 
policies. 

In several countries around the world we have personalities who are like 
Trump, and have become experts in gathering power into their hands.  A few 
weeks ago, thousands of former US Justice Department individuals suggested 
Attorney General Barr resign.  After Congress passed a version of the 
Patriot Act where the US government could go through the browsing history 
of any citizen without a Warrant, that is, without proving that they had a 
good reason.  I think that there are now several thousand former FBI and 
Justice Department individuals who might think about using QUBES.  If they 
knew of it, and it was more user friendly.  

The history of VPN's shows they can be corrupted, coerced into providing 
information.   Truthfully, if I was a tech at a VPN, and some police agency 
came to me and said, this particular person is a Pedophile.  We need to 
reach into his account, and find the location of others like him, maybe 
even some missing children.  If we find nothing.  No harm.  No foul.   A 
powerful argument. 

Sure, if ones only need was to log into ones bank account, while making 
sure someone two tables over did not hijack their connection and steal 
their banking info, then a  VPN wou

[qubes-users] Private Tor Bridge.

[Catacombs]

Not sure if Qubes Users is the best place to bring this up.

As I look at the various means to get on the Internet, in risky situations:
Public WiFi.
Hotels.
A country which is involved in spying on its citizens.  

I notice that Tor has a means for "Bridges."  A Bridge being an IP Address 
that allow one to make a first hop to an IP Address that the ISP, or local 
server is not expecting, or blocking.  

My problem being that if one was in a place like China, then the government 
is surely trying to gather up all the Bridges which the Tor network has.   

Just generally, I see one could create a private webpage somewhere, and 
place on it the software to allow one to use it as one's own personal, 
private Bridge.  First hop out.  Then one could direct the software on the 
Server to - which ever. start a standard Tor, Connect to a VPN.   

It does require trusting where the server is one has put one's software 
on.   

Obviously, one could borrow the Software from Tor to create a Bridge.  I 
did not mention it to Tor, because, as this is risky in several ways, Tor 
website will not publicly agree to help create this project.   Although 
some of their programmers might advise on how to minimize risks.   

And the implementation inside Qubes Network manager software -dom0 has its 
own special issues.  

Any comments?  / is this already on the list of suggestions for Qubes?


-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/0b4f878c-7d67-422e-90d6-e249bea92654%40googlegroups.com.

[qubes-users] Next update of Qubes?

[Catacombs]

I see that Qubes does not announce planned new releases of Qubes, or state 
what should trigger an update. 

I am between updating Qubes with Fedora 32, which also means creating 
AppVMs, I am not sure how I would update the Work VM, as it is, I am 
guessing, based on Fedora 32.  All this translates to my working with Salt, 
which is shown a lot of in this forum.  Meaning I should learn Salt and 
some other things.  

Just seems like it would be so much easier if we had an entire new version 
of Qubes, which I could install.  At the same time, I am making sure any 
Malware I might have picked up gets clobbered.   And leaving me with the 
problem of re installing all of my personal files, my own personal fixes to 
Template VMs.  Instead many are learning Salt.  

This question also comes back to making Qubes easy for Human Rights 
Activists and Journalists.   I do not think those two groups will go to the 
trouble of learning how to install Salt.  I agree that since most of the 
changes for Human Rights Activists/Journalists are made inside Template VMs 
of (now usually Debian, or Fedora), that the folks who create Qubes for us, 
should not concern themselves with those things.  

So, anyone here have a guess as to what new version of Qubes might be 
nearly out?  Or should I start reading about how to work with Salt?  


-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/4b95eb01-d12e-46ae-8bd4-0996f2b49a62%40googlegroups.com.

Re: [qubes-users] Re: HCL - Latitude E6230

[Catacombs]

“Install hanging at Network  “

My install stopped a really long too at ‘Network’.  It finished though and 
works.I have error messages during boot.  Which I should probably search 
out.  But Linux usually has messages that refer to hardware I do not have.  

Installing wireless software modules, firmware can be challenging.  I am trying 
to find a USB Wireless Dongle which comes pre installed in the Kernel.  But.   

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/cf6e4d19-0a83-4c6b-bd59-b24e794a6db1%40googlegroups.com.

Re: [qubes-users] Qubes better dove tailed for Journalists, and Human Rights Workers.

[Catacombs]

Which side are you.   Techi Geek type?   Or some type Investigator?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/17bd2d1a-f9fa-4fbf-9211-13d21d95297e%40googlegroups.com.

[qubes-users] Qubes better dove tailed for Journalists, and Human Rights Workers.

[Catacombs]

To be clear, the folks who have put together and developed QUBE's have done 
a fantastic job.  A great accomplishment.   

I bet this has been discussed before.   Much of what I have experienced is 
that QUBE's users should be more like techy geeky people.  A Journalist or 
a Human Rights investigator, I think are more comfortable with ease of use, 
not secure.  

So, I bet this has been talked about before.  As I was doing the upgrade to 
Fedora 31, I realized a Journalist is not likely to be very happy doing 
that.  After that, I had to search to find a Text Editor, (Gedit is what I 
used)  A Journalist would expect that the things he/she does all the time 
would be right there, ready for use.   I would think a Journalist would 
have 12 different ongoing projects, which he might realize should be in 
separate QUBE's, and might not have the presence of memory to realize what 
to save, where, something an investigator would need to do often.   I would 
think the investigator might not realize to create a number of encrypted 
partitions, to further protect information distinct to a particular, 
specific investigation.

Then I tried to watch a Video.   Gee guys, a Journalist just expects this 
stuff to work.  I , on the other hand, am concerned our mythical 
investigator not realizing the possible security implications of opening 
what kind of app, when.

It is not my intention to provide a list of things to put in the basic OS 
for an Investigator who is not what I would term, a techno geek, nor who 
does not want to be.  It is to find out what has been discussed in the past 
about this subject, and for some of you, who are more experienced with 
QUBE's, and investigators, to put that list together, and perhaps build 
that list into the basic Install of QUBE's.   

Once again, I deeply respect what the QUBE's developers have accomplished.  
So this is not intended as a criticism of the folks who have put in 
thousands of hours getting this project to this point.  Thank you for what 
you have done.  

Tech people do not think like Journalists of Human Rights Workers, nor vice 
versa.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/53cf322c-78f9-4789-a0d0-91f12014f1ec%40googlegroups.com.

[qubes-users] Different hardware, far nicer Qubes experience

[Catacombs]

I had been using QUBE's on a Lenovo X230, which in my opinion has a 
TouchPad that is difficult, and a keyboard that is not very pleasant.  That 
one does not like an external wired mouse.  Keeps disconnecting mouse.  

I just put QUBE's on a 2016 Alienware 15 R2, which has a Core I7 Skylake 
Processor and 16 GB RAM with an M2 SSD.   

So much nicer with a more easy to use TouchPad and Keyboard.  Not to 
mention faster.   

Problem is of course, this is only 70 percent of secure.  I do not have 
hardware with free drivers, and some other things like that.  But it is 
smooth. 

I wanted to say to those who are trying out QUBE's, the hardware one uses 
really changes the experience.   So don't give up.  I also hope that soon 
we will have tenth generation processors with hardware that has free 
drivers.   

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/5f5f2afb-69f9-4307-ac99-970d2b14e678%40googlegroups.com.

[qubes-users] Re: disp vm template not working in fedora 31

[Catacombs]

On Monday, May 4, 2020 at 12:13:55 PM UTC-4, galth...@gmail.com wrote:
>
> Hello, I hope someone can help with this.
>
> I have a modified fedora 31 template which I want to use as a disposable 
> VM.
>
> I have done this:
>
> Created a app vm called my-dvm based on my-f31-template using the qubes 
> manager
>
> In the dom0 terminal:
>
> qvm-prefs my-dvm template_for_dispvms True
> qvm-features my-dvm appmenus-dispvm 1
>
>
> There are no error messages but I dont get the 'Disposable' entries in the 
> start button menu. So I did this:
>
> qvm-appmenus --update --force my-dvm
>
> my-dvm: Creating appmenus
> Traceback (most recent call last):
>   File "/usr/bin/qvm-appmenus", line 9, in 
> load_entry_point('qubesdesktop==4.0.20', 'console_scripts', 
> 'qvm-appmenus')()
>   File "/usr/lib/python3.5/site-packages/qubesappmenus/__init__.py", line 
> 644, in main
> appmenus.appmenus_update(vm, force=args.force)
>   File "/usr/lib/python3.5/site-packages/qubesappmenus/__init__.py", line 
> 541, in appmenus_update
> self.appmenus_create(vm, force=force, refresh_cache=False)
>   File "/usr/lib/python3.5/site-packages/qubesappmenus/__init__.py", line 
> 256, in appmenus_create
> dispvm):
>   File "/usr/lib/python3.5/site-packages/qubesappmenus/__init__.py", line 
> 140, in write_desktop_file
> raise DispvmNotSupportedError()
> qubesappmenus.DispvmNotSupportedError: Creating Disposable VM menu entries 
> not supported by this template
>
>
> How can I fix this?
>

I am looking  for what I think is a similar answer   If I create a clone of 
a template, Choose Qubes Settings. I change the color of Qube to red.   The 
second tab is Advanced.  on down in the left column there is a reference to 
what the Default template setting is.   hmm.   where to go from here.  

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/cd5d0be5-76c4-4e16-a5ca-819f072c88aa%40googlegroups.com.

Re: [qubes-users] Re: Password not working a day after reinstall

[Catacombs]

Perhaps your internet connection.   Your problems remind me of my brother in 
the days of telephone connection and his cat thinking the telephone wire was a 
great plaything.  And clawed wires up.  

Hope you find the money to buy another computer.  

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/795fb0a8-65f7-4835-8b87-6b9eb921f93d%40googlegroups.com.

Re: [qubes-users] Re: disp-vm whonix torbrowser open tabs file?

[Catacombs]

”l have a whonix disposable tor browser whonix vm running with a load of tabs 
open, maybe 30 but I can't check the precise amount because the tabs don't 
scroll anymore. “


Consider creating a clone of Whonix Template QUBE,  make all your Tabs 
Favorites.  Used to be an option in Firefox to open all favorites.  Or there is 
an option of what to start when starting Firefox.  
Save this template clone for the specific use of having this group of Tabs a a 
available all at once. 

”The browser hangs.” Perhaps increase the memory allocation for the QUBE that 
has all the Tabs

“As soon as I close the browser my tabs will be gone and I don't like to lose 
them. 
I think there must be a session.json file but that seems to be created only 
when the browser closes, and this will close the VM automatically, so even if a 
restore file with tabs in it is created, it will be gone upon closure of the 
browser.
I can access the file system from within dom0 and could copy any file that I 
need.

Is there any place where whonix tor browser stores its currently open tabs? 

Thanks ahead.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/e4ab08ee-0ed4-4089-9427-86850a35c9ea%40googlegroups.com.

[qubes-users] disp-vm whonix torbrowser open tabs file?

[Catacombs]

Would it work to create a clone of whonix template QUBE.  Then create the tabs 
you want, save that before you do anything that might leave Malware in this 
template?  

Perhaps increase the memory allocation for this QUBE with the hope of the many 
TABs causing a hang.  

Another option is to make all those tabs Favorites.  There used to be an option 
in Firefox to open all Favorites.  But I do not know if or how that is 
implemented in QUBEs Firefox.  Consult Firefox help. 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/a0059878-a413-43d9-8696-a6900fe30ca7%40googlegroups.com.

[qubes-users] Re: Fedora 30 approaching EOL, Fedora 31 TemplateVM available, Fedora 32 TemplateVM in testing

[Catacombs]

I used Iphone as a hot spot.  After I had WiFi working I started Whonix.   Went 
to System/terminal used the update command with —clean in the middle of it.  At 
some point it switched to a second server or repository.  

I have now used up 4.4 GB of my ten GB HotSpot with thirty days left.  I also 
did an update of dom0 and Whonix.  

I thought I should come back and explain one way the update works. After I got 
several error messages.  

And again.  Thanks to our developers who keep this OS working.  

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/27dd716d-c5a7-42ff-8478-9595d8f42603%40googlegroups.com.

Re: [qubes-users] Fedora 31 ?

[Catacombs]

I get the same error message.  
After I typed sudo and so on.  It never asked for a password. 
I set when I first installed Qubes onto this to do updates through Whonix.  
I am also guessing the repo servers might be busy right now.  

I am using a public WiFi (McDs).  Which tries to block any Linux. Freeware 
downloads by IP address, which is why I set it to download by whonix.  

Sitting outside McDs today I have exceeded my daily limit of frustration.  

As I tried to say when I asked.  Will the need to upgrade to the next level of 
Fedora trigger a new release of QUBEs.  As installing Qubes from scratch is 
easier than my computer trying to negotiate a tricky connection with update 
repos.  

Still thanks to the developers.  What I experienced in trying to download 
software is nothing compared to what you fellows slog through.  

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/8a962f8d-cbb3-46e3-bf0e-20e39c754718%40googlegroups.com.

Re: [qubes-users] Re: Fedora 30 approaching EOL, Fedora 31 TemplateVM available, Fedora 32 TemplateVM in testing

[Catacombs]

Will there be a new release of QUBEs to avoid a new release of iso?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/744fbf8d-1cad-4e19-b133-741a6ee6c31a%40googlegroups.com.

Re: [qubes-users] Anyone here try VMware in place of QUBES?

[Catacombs]

Thanks for replying. 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/405c7656-64d2-49d5-9336-a57defdad7f9%40googlegroups.com.

Re: [qubes-users] Anyone here try VMware in place of QUBES?

[Catacombs]

On Thursday, April 30, 2020 at 11:09:59 AM UTC-5, Catacombs wrote:
>
> My apple is from 2009.  Which I upgraded until I got to Mac OS 10 Lion. 
>  One of the Apple tech support suggested to defer OS 10 updates as the 
> features added were for Syncing between different devices like IPhone, 
> IPad, ICloud, other Apple computers.  I would call them security holes. 
>  Besides Apple uses Broadcom for internet connection.  Not Foss.  And TAILS 
> says brooadcom  can not be spoofed.   
>
> My thought being to use Linux distro as the host.  Perhaps, pen testing.  
> A Linux Distro that has an extensive outgoing Firewall.  Then put VMware on 
> top of that, for $250.00.   
>
> But I am not anxious to do so if VMware is the total black box suggested 
> by poster.   
>
> I recall several years ago, a huge security hole, created in open source, 
> coding left to a group of enthusiasts, in Java.  A guy was begging not to 
> be banned for writing the security hole.  Pointing out his Patch had been 
> approved by very knowledgeable developers and he clearly had no intent to 
> create a security hole.   
>
> My point being open source and FOSS are not perfect.  Plus.  What no one 
> every talks about.  The NSA is one of the largest employers of 
> Mathematicians in the world.  I would guess the NSA is also one of the 
> biggest employers of really well trained Linux programmers.  That is. They 
> don’t, as Hollywood might suggests, hire their tech guys from script 
> kiddies who are in jail or probation.  They hire first rate minds who had 
> the work ethic to get a  Masters from places like MIT. USC.  First rate 
> Computer Science  programs.  These NSA tech guys are likely spending some 
> of their employers time in helping to fix Fedora, Debian, Perhaps Tails and 
> Qubes as well.   
>
> I am pretty sure China. China with the big C who is reputed to have a lot 
> of their who used computers in some way the government did not approve. 
> Such as, Telling the Truth of events.  Or just violating the big China 
> Firewall.  Big China has a large group of Linux programmers, who might be 
> helping Linux Distros as well.  Of course. In some small countries I 
> suspect their security services are not well trained computer specialists. 
>   Perhaps individuals who left schooling before middle school. But their 
> interrogation is more blunt bruising instruments. Heated objects.  Ropes. 
>  Cold water.   I might have gone to elementary school with some like that, 
> here in the US.
>
> Still China may have more qualified Linux programmers to pull apart Tor. 
> Tails. Qubes. Than their are qualified Linux people trying to make it work. 
>   
>
> There is another group of security concerns we never write about on the 
> Qubes site.  Our connection with the internet. Servers.  ISP software. 
> Server software.  Well actually we now hear of the 5G hazards.   
>
> How much more Secure is what I do with QUBEs versus something like VMware. 
>  Also assuming I am careful of how I use it.  That I have a formula to use. 
>  Reminding myself that “Encryption is more likely broken in Practice than 
> in Theory.”  That is. If we use poor techniques. Then all the encryption 
> available will not help us.   
>
> All that said. I will continue to use QUBEs. Because at least they try.   
>
> But another question obvious to many experienced QUBEs users.  Why Fedora 
> is emphasized over.  Say CentOS. Which is supposed to be the same as Red 
> Hat, CentOS having a delay in implementation?  Or a very limited hardened 
> Debian?


 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/a84b7ad5-a2eb-4581-8eae-01ed7d0c4143%40googlegroups.com.

Re: [qubes-users] Anyone here try VMware in place of QUBES?

[Catacombs]

My apple is from 2009.  Which I upgraded until I got to Mac OS 10 Lion.  One of 
the Apple tech support suggested to defer OS 10 updates as the features added 
were for Syncing between different devices like IPhone, IPad, ICloud, other 
Apple computers.  I would call them security holes.  Besides Apple uses 
Broadcom for internet connection.  Not Foss.  And TAILS says can not be 
spoofed.  

My thought being to use Linux as a host.  Perhaps, pen testing.  Linux that has 
an extensive outgoing Firewall.  Then put VMware on top of that, for $250.00.  

But I am not anxious to do so if VMware is the total black box suggested by 
poster.  

I recall several years ago, a huge security hole, created in open source, 
coding left to a group of enthusiasts.  A guy was begging not to be banned for 
writing the security hole.  Pointing out his Patch had been approved by very 
knowledgeable developers and he clearly had no intent to create a security 
hole.  

My point being open source and FOSS are not perfect.  Plus.  What no one every 
talks about.  The NSA is one of the largest employers of Mathematicians in the 
world.  I would guess the NSA is also one of the biggest employers of really 
well trained Linux programmers.  That is. They don’t, as Hollywood might 
suggest hire their tech guys from script kiddies who are in jail or probation.  
They hire first rate minds who have Masters from places like MIT. USC.  First 
rate CS programs.  These NSA tech guys are likely spending some of their 
employers time in helping to fix Fedora, Debian, Perhaps Tails and Qubes as 
well.  

I am pretty sure China. China with the big C who is reputed to have a lot of 
folks who used computers in some way the government did not approve. Telling 
the Truth of events.  Or just violating the big China Firewall.  Of course. In 
some small countries I suspect their security services are not well trained 
computer specialists.   Perhaps individuals who left schooling before middle 
school. But their interrogation is more blunt bruising instruments. Heated 
objects.  Ropes.  Cold water.  


Still China may have more qualified Linux programmers to pull apart Tor. Tails. 
Qubes. Than their are qualified Linux people trying to make it work.  

There is another group of security concerns we never write about on the Qubes 
site.  Our connection with the internet. Servers.  ISP software. Server 
software.  Well actually we now hear of the 5G hazards.  

How much more Secure is what I do with QUBEs versus something like VMware.  
Also assuming I am careful of how I use it.  That I have a formula to use.  
Reminding myself that “Encryption is more likely broken in Practice than in 
Theory.”  That is. If we use poor techniques. Then all the encryption available 
will not help us.  

All that said. I will continue to use QUBEs. Because at least they try.  

But another question obvious to many experienced QUBEs users.  Why Fedora is 
emphasized over.  Say CentOS. Which is supposed to be the same as RedHat, with 
delay in implementation?  Or a very limited hardened Debian?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/8e5bf794-3515-439e-9302-c56ce0f68cf9%40googlegroups.com.

[qubes-users] Anyone here try VMware in place of QUBES?

[Catacombs]

I have used VMware on a Mac.  I do not the idea of OS X being the base of my 
security,  however like they say about a lot of Apple, it just works.  

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/fc43c85d-4cde-4607-927d-5adc8d057b8e%40googlegroups.com.

[qubes-users] Re: Do you use Qubes OS as your main OS on primary PC? What kind of work do you get done on it?

[Catacombs]

Do you see a security problem with the Lenovo X230. Or is it a speed problem 
that makes you look elsewhere?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/a3824b68-c9f0-47c0-924e-697a83af5c72%40googlegroups.com.

[qubes-users] Blanking memory for security?

[Catacombs]

That is for a QUBE to write over the memory it occupies, before it takes 
over the memory, or as it leaves the memory.

Or should I say writing over the memory, likely some RAM, some virtual on 
the drive with a pattern.

Does QUBEs do that?  Should I be concerned if it does or does not?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/6482ee58-a0bd-460c-9979-fcfc3082dd18%40googlegroups.com.

[qubes-users] Q: LV (disk) as fake USB stick?

[Catacombs]

Not sure I grasp where you are, what your hardware is like, and what you 
consider successful.  


Let me say that another way.  I suspect you are trying to install Qubes OS in 
conjunction with some other OS on the same computer.  

I view the install of Qubes.   Qubes prefers to be the sole occupant of the 
computers hard drive.  Other means of installing Qubes are more difficult.  
Like trying to have more than one OS on the same computer is problematic.  

Let me guess you have one OS (like Windows or Linux) and the installer you are 
using is Rufus or Balena Etcher?   Which installs to like a USB key.   One 
would not install Qubes from one hard drive partition to another Partition on 
the same drive.  Not saying it is not possible, just more difficult than I 
understand how to accomplish. 

Then one would boot from that USB key, which has Qubes on it.  Qubes on the USB 
key has its own installer which would prefer to clobber whatever you have on 
the hard drive and write itself onto that hard drive (preferably a SSD).   

Anyway.  You may trying to do something more clever than I know about.  

So if what I write only reveals my ignorance, and is of no help.  Please tell 
us the Installer you are using. 

Perhaps.  Consider - How Qubes achieves it’s Security.  First it wants to 
protect itself from interference from other programs, as much as possible.  So 
it installs ‘bare metal’. It wants to install a Xen Hypervisor directly on the 
hard drive. The Qubes installer (The installer that gets started after one 
boots Qubes that is on the USB) will want to install it’s own boot sector on 
the drive.  It will offer to encrypt the hard drive and wants you to give it a 
password for the encryption.  It took me a few trials to get the partition to 
where the installer was happy.  Something about clicking on manual. Recovering 
space.  Then pick options where it will install several different Qubes with 
different OS’s in them.  Like Fedora.  Debian. Whonix.  Someplace in the 
install the installer will want you to give it an account name and a login 
password.  Takes awhile for the Qubes installer to run.  

Each of the Qubes which are initially installed will run as a secure virtual 
machine, running on top of the Xen Hypervisor.  So other software on the 
computer might cause a security problem which the creators of Qubes might not 
expect and thereby prevent.  

I apologize to OP if I am actually not being useful.  There are other 
variations to doing the install. I just took what I thought was the most direct 
to getting Qubes onto my computer. Making it the sole occupant of the hard 
drive. Actually.  I used an external DVD and burned a DVD of the Qubes iso I 
downloaded and installed from that. 

Keep in mind.   No matter how careful you are.  You can lose all the other info 
on the computer you are trying to install to.  Back that up.  Preferably 
several times before starting on this adventure.  

And someone more knowledgeable will soon come along and tell you why I am 
wrong.  

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/3a69560f-d29d-413c-9b7d-abec4d860451%40googlegroups.com.

[qubes-users] How to install Pure OS as standalone

[Catacombs]

Like I notice that a Fedora VM has a memory of 2048.  Seems low. During install 
I guess it did not see my 16 GB RAM and set a minimal number in case my RAM was 
4 GB.  So I should probably modify Fedora Template as well?   Debian Template?  
 Not sure about Whonix.  I have to look.  

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/5953f5ce-d42a-4787-a3f1-f027094f3e6b%40googlegroups.com.

[qubes-users] How to install Pure OS as standalone

[Catacombs]

A Bit of advice would save me a lot of trial and error.  Put Pure OS onto a DVD 
in a bootable format, as if I was installing from DVD onto hard drive.  I 
create Stand Alone Qubes select install. I have Lenovo X230 with 16 GB RAM and 
a 500 GB drive.  Settings. Memory I take to mean how much RAM. About 4096 seems 
right.  The second I take to represent how much hard drive for this Qube. Next 
page again says memory and it’s seeming to suggest 200 mb?   This is about 
memory and processor.  I dunno what it wants.  And I don’t see how to start 
install.  Or which options will let me easily start it after install.  

Any pointers here?  

Thanks for advice. 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/474a8c7b-04dd-4203-a0d4-676d5dc90c54%40googlegroups.com.

Re: [qubes-users] Intel Management Engine and RNG

[Catacombs]

I would have thought someone could suggest a more trustworthy RNG.  

One of original means of trustworthy communications was to use two different 
computers.   

One was air gapped and used to write encrypted email.  And later to open and 
decrypt email from the online computer.

Point being if the air gapped machine generated the keys.  Much harder for 
someone to break into emails.  

Which brings me to how  to find a more trustworthy RNG

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/fe7c1501-d1ff-494d-9764-d3fbebd96bd6%40googlegroups.com.

[qubes-users] Intel Management Engine and RNG

[Catacombs]

It is my understanding that “the “Number Generator”  is on the MOBO.  Could the 
“Intel Management Engine” be changed to alter the RNG to create weakened 
Encryption?

Could the IME be altered to load malware to steal Passwords and then to send 
them somewhere. 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/7519e026-9584-409d-bbdd-f7170fa59869%40googlegroups.com.

Re: [qubes-users] Creating ones own Insurgo

[Catacombs]

As I read on the git hub Skulls page.  There is an individual who bricked his 
Lenovo X230 with trying to install CoreBoot.  and can not reinstall his back up 
of his original BIOS/EFI.  Not a lot of advice on that board.  

Day before yesterday I put a spinning hard drive into my X230 to experiment 
with.  For any of you not familiar with the physical layout of an X230, 
replacing the drive is super easy.  One screw removes the plate covering drive. 
 Drive slides out, has soft rubber slides that pop off either side of drive.  
Put them on replacement drive.  Slide it in. Put side plate on.  Tighten down 
screw.  

I experimented by installing the Pure OS.  I have an iPhone, on which I am 
typing this, which has unlimited data.  And came with a gift of ten GBs 
HotSpot.  I plugged the cable between the iPhone and X230 pure USB port to use 
data.  Pure is like Debian in that it is FOSS and does not have driver for the 
already installed Intel Wireless.  I spent several hours trying to get a Real 
Tek USB WiFi to install.   Didn’t work for me. So I installed QUBES onto the 
spinning drive.  Works.  

Point of all this being. If I could keep the Intel Management Engine from from 
phoning home.  And use the Wireless of my choice. I might not itch so much to 
install Core Boot Skulls.   I know that Qubes will let me see connections with 
a wireless dongle.  Maybe I should just disable driver for Intel WiFi, and just 
toddle along.  I am guessing that would be in the Xen Hypervisor. 

So my question is how do I disable the Intel WiFi driver.  Might easier to just 
open back of computer and remove chip.Maybe the Intel Whitelist of WiFi is 
just a hoax. I should just try the Atheros chip.  Probably lead to two hours of 
re installing QUBES.  Any thoughts?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/7b877791-bacf-46b3-9222-3cc903926c33%40googlegroups.com.

[qubes-users] Creating ones own Insurgo

[Catacombs]

I purchased a refurbished Lenovo X 230 Core I5, 4 GB RAM, and a spinning hard 
drive, Windows 7 Pro for $228.00.

I ordered 16 GB RAM for about a hundred dollars. I thought the RAM would be 
less expensive. 

My first mistake was to raise the BIOS/EFI to 2.77.  Turns out Intel encrypts 
something to prevent one from rolling back the BIOS/EFI.  

The option I had before was to run a jailbreak on the Lenovo that should allow 
me to neutralize the Intel Management Engines ability to get updates from 
Intel.  Intel also had a whitelist that limits which WiFi chip it will allow to 
be used.  I guess to make sure the Intel Management Engine can talk to the 
mothership.That jailbreak does not one to take apart the laptop. The 
jailbreak is on github 1vyrain.  The site says do not attempt to use the 
jailbreak unless one has the allowed, correct, lower version of BIOS/EFI or it 
will brick it.  As I write this I see some folks who say (Lenovo Forum) they 
have -done something - to roll back BIOS/EFI to 2.6.  So they could use 
1vyrain.  Jailbreak 1vyrain actually accomplishes two of the big items I 
require. Prevent Intel from changing my X230 to something I do not want.  And 
allow me to use another WiFi chip.   

Flashing the Lenovo X230 BIOS/EFI w
ith an EEPROM is git hub Skulls.  Which requires I spend money. And the 
documentation for doing that is not obvious, and old.  

I decided I should buy a PI to program the X230.  I started to buy one from 
Amazon  and cancelled that when I saw the voltage on the power supply was 2.5 
volts and someone said not use 3.3 Or less as the flash might not work 
correctly.  Someone suggested ADA Fruit for the Pi. But the more complete ones 
are not
In stock. I am waiting on Corona money to buy one so I wil keep looking.  I had 
a link once suggested by Insurgo. But it came from China, and took many weeks 
before the Corona started.  

My first questions. I had thought while looking at the Skulls there would be an 
option for Core I5 versus Core I7. I haven’t seen it so far.  Does that matter? 
  

Clearly states to remove the battery, but did not say the coin CMOS battery.  
In fact I have not found that little turkey. 

I want to have enough in my bank account to afford a replacement MOBO if I 
brick this one and can’t unbrick it.  

Mostly the available documentation might have some flaw I am not experienced 
enough to catch.  


One thing is obvious, while I my income may be to low to buy one, Insurgo 
products are not overpriced.  This project is a lot of trouble.  Parts. Tools. 
are not free.

Anyone have recent experience with flashing Skulls onto Lenovo X230?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/97ee1152-79a0-496a-be06-71f2650269a0%40googlegroups.com.

Re: [qubes-users] Privacy Beast vs Nitropad comparison?

[Catacombs]

Librem pricing shows two prices for including a Nitrokey  sending key 
separately or with laptop.  I assumed that would be to verify shipment had not 
been tampered with.  I guess I misunderstood how that really worked.  If it is 
not encrypted properly. Then that would not be close enough to Insurgo options. 
 

Apologies for changing the subject.  But this would be a good time to ask the 
last poster, or anyone else, do you have any experience with the project, I now 
face, flashing Core Boot onto a Lenovo X 230?  Last Poster seems to have more 
knowledge than I in hardware.   

Thanks for correction. Details are more important than impressions.   

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/3dad6377-d0cf-48f8-b6ce-2e5d304ec932%40googlegroups.com.

Re: [qubes-users] Privacy Beast vs Nitropad comparison?

[Catacombs]

Your choice between NitroPad or Insurgo might depend on where you live.  I 
think Insurgo is based in north America, and Nitro is based in Europe.  
Different taxes, shipping problems, searches.  I thought they both allowed 
for non-tampered shipping security with NitroKey.

Option three is is the laptop from Puri, Librem.  From north America, also 
allows for non-tampered shipping security with NitroKey.  https://puri.sm/

Besides there standard offering they have a sale on what they call 
refurbished, which some believe is Puri/Librem clearing their warehouse 
shelves.  

https://forums.puri.sm/t/refurbished-librem-laptops-on-sale/8841

For their Pure OS, they offer another service, (for a monthly fee).  
Despite being Debian based, these do not install so easily on other Linux 
OS's.  https://librem.one/

They offer their own Debian based OS, Pure OS.Pure uses Boxes for 
security.   These is free OS, and you can give it a whirl without buying 
anything.  https://www.pureos.net/  

Puri/Librem  will install Qubes for you, (I think for a charge) or you can 
do that on your own.

The other OS's which one might use is Tails Linux (yeah, you knew that, but 
I had to mention it.)  and Easy OS.  

Easy OS some might not consider to be secure, only one developer, Barry 
Kauler, uses Boxes for security.  
http://murga-linux.com/puppy/viewtopic.php?t=109958

I guess noobs need Qubes is a joke, because it has some intensive learning 
associated with using it properly.  or at all




-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/4bb668a5-5c0e-44cf-a2d5-2e39c9af71c3%40googlegroups.com.

Re: [qubes-users] Me (anon-whonix AppVM) -> Tor -> VPN, settup with Mullvad VPN

[Catacombs]

Sorry memory better now. That was three years ago. Windscribe was the VPN that 
was easy to install, in a Debian based distro.  Are you installing in the 
Template or a stand alone VM?  

I obviously do not have the experience - knowledge you would want. But my 
experience with a VPN under Linux was different than where you were trying.  

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/30e3b385-f4a6-432f-bf1e-47bc07e3a3b7%40googlegroups.com.

Re: [qubes-users] Me (anon-whonix AppVM) -> Tor -> VPN, settup with Mullvad VPN

[Catacombs]

I have never used Mullvad or a VPN under Qubes.  However,  I seem to recall 
having problems with udp,  I think you want tls and tcp.  If you DuckDuckGo the 
differences.  You might see udp is not so great.  

Also.  Usually to get a VPN to work in Linux you must turn off IPv6.  That is 
the one that goes to printers.  IPv4 is for most all the internet.  


Consider doing this to see if the whole concept of VPN is working.  I think it 
is CyberGhost which offers a few free GBs every month.  But I think that is the 
one I once used under another linux distro. And it was easy to set up and 
worked.  Then you might see what settings need to be what. 

Best wishes 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/972e7a0d-520a-42a8-a502-b0fe762bae3b%40googlegroups.com.

Re: [qubes-users] Building a new pc for running Qubes OS

[Catacombs]

Six weeks ago I saw workstations at Salvation Army thrift store.  From some 
company who did video editing.  Windows 7 era.   Xeon, 32 GB RAM.  No keyboard 
mouse or monitor.  

Usually these have had hard drives removed.  No warranty.  No return.  They 
have zip ties to keep people from feeling around inside.  So I don’t know if 
video cards have been removed.  

Puri Librem is offering for pre-sale a mini.  This is very likely sure to work 
with Qubes.  They are also selling their stock of Librem Laptops, likely about 
to offer a higher specification CPU.   Or they are financially desperate.  ??   
Anything from Puri- Librem is sure to work with Qubes.  

Yeah.  Not a workstation with a Xeon. 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/43b6c7d3-4166-448a-9fc8-6a4c51287e39%40googlegroups.com.

Re: [qubes-users] Cloning Qubes onto a USB flash drive.

[Catacombs]

I started to do that.  Good idea.  But I recalled. Long ago. That Apple 
support, when I had it, told me to never copy USB to USB.  I guess because it 
overheats the USB innards.  


Maybe you meant start install iso from inside an os in laptop.  Like inside an 
App VM. And install from there.  Hmm.  Should work faster.  

I will try different Linux distros to see if they have a Clone software.   I 
vaguely recall that Mint Linux had an easy to use Clone Disk program 19 months 
ago.  Maybe I should study up on dd command.  
 
I just thought someone might have recently done the Clone.  Else I am just 
trying things.   I only have so much time for Qubes.  

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/40a89c4b-8248-4ea8-9679-631ca4dd06b4%40googlegroups.com.

[qubes-users] nuc hades canyon - intel vt-d, and virtualization are on and still showing the IOMMU error

[Catacombs]

Please do us all a favor and clearly tell us what solved this. Meaning only try 
one thing at a time.  I see a lot of posts like this.  I had the error message 
and I can not tell you which I did to solve it.  But it is time to amass a data 
base of what works. What causes error.  

I have read that some say they started the target computer in UEFI mode. 
(Secure Boot) and the install simply worked.  

My laptop says it will try Legacy and then UEFI mode.  And I did several other 
things at the same time, so I do not know. 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/7d73a77a-19ab-44da-b41d-3356213765d5%40googlegroups.com.

[qubes-users] What does ISP see when my computer connects?

[Catacombs]

And what the ISP sees after I start a Qube?

How can I see what my MAC is on a receiving website.  Documentation suggests 
that it would see a spoofed MAC.  But that spoofed MAC needs to be 
unpredictable and look normal.   

When I had at home internet, the ISP allowed me onto their connection according 
to the MAC address of their router.  Which MAC is being broadcast across 
internet?

Am I worrying about the wrong detail?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/067db7f7-f8f9-44cd-8b44-84e4636a37a6%40googlegroups.com.

[qubes-users] Cloning Qubes onto a USB flash drive.

[Catacombs]

Anyone have any experience with Cloning a working Qubes onto a 32 GB 3.1 flash 
drive to later boot off of?

What is a useful piece of software to do the clone, that I can run as off 
another USB key as a live version of Linux.  

Could the cloned version of Qubes on the USB  Flash drive be used on another 
hardware to actually run Qubes?

Thanks for advice.  

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/d3a28cb0-4c4b-40e3-8d8e-47dec6b02e6d%40googlegroups.com.

[qubes-users] Installing Core Boot Skulls onto Lenovo X230

[Catacombs]

Hi.  I will soon attempt to install Core Boot Skulls onto my Lenovo X230.   I 
purchased the X 230 with a Core I5 and 4 GB RAM.  I have done several things 
that I now know will not make the task easier.  

Some of the advice on doing this is two years old and for a slightly different 
X 230. I did not have the money to buy one with a Core I7 rather than a Core 
I5.  I had hoped to easily find an option for a Core I5. Not am I sure it is 
necessary.  I installed 2 stacks of RAM that were 8 GB each.  Now I read that 
CoreBoot SeaBios Skulls sometimes does not like some RAM, but no explanation is 
offered.  Then my other mistake.  I upgraded the basic BIOS to 2.77.   I did 
not realize it was not possible to go backwards in the standard Lenovo BIOS 
very far, or that it might be useful.  Apparently Skulls does not overwrite 
everything in the ROM.  

I also took out the spinning Hard Drive out and put in a 500 GB Samsung SSD 
evo.  I tried successfully tried out several Linux distros, and have now 
installed a working Qubes.   I can’t seem to catch enough Wireless Signal from 
our local library for Qubes to Work, although my Alienware 15 flies on the same 
amount of signal.  I can not go into the Library (closed for Corona Virus 
Quarantine) even though the wireless is on sometimes.  I can catch enough 
Public WiFi Wireless Signal outside McDonalds For Qubes to function.  So Qubes 
works on this now.  

As I can put the Standard BIOS/EFI to 2.7, I guess I will have to put Windows 
back on the X 230 to accomplish that.  

I will receive  Pi W at the end of the month to attempt to install Skulls.  I 
have a cheap clip to attach to Program this thing.  Someone suggested I would 
only use it one time. Or maybe twice at one time for upper and lower parts of 
the laptop chips, I probably could get away without that.  Just. If it gets 
messed up it might take weeks in today’s world Of Corona induced delays  to get 
a Pomona clip To even see if the computer could be brought back out of Coma.

I have brought this discussion before.  I do so again thinking someone who has 
more recent experience doing exactly this might suggest how I am about to mess 
this up.  

I have a few weeks before I receive Pi W.  So I have time to think on this.  To 
facilitate this.  My IPhone should offer 10 GB hotspot for Pi.  

Can anyone tell me if installing the CoreBoot Skulls will be assembled 
differently for a Core I5 rather than a Core I7?   

Is the threat made on the Lenovo website that I can not roll back the current 
BIOS/EFI from 2.77 to earlier than 2.70 a paper tiger.  And I might go back 
earlier, or should I even want to?

Which OS should I put on Pi for this?  The mentions of OS used on PI by others 
seem to be for earlier OS versions. 

I have purchased the Atheros WiFi chip used by Insurgo.  I have been told that 
the standard Lenovo BIOS/EFI will block its use.  Skulls should allow the 
Atheros WiFi to work, so I read.   

Worrying about all this allows me to appreciate all the effort Insurgo goes to 
in creating a re-manufactured Qubes device.  

Thanks any experienced advice.  
Any other preparation should I make at this time?   

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/ab7aa5e0-8201-47b5-9415-c240cd7b487f%40googlegroups.com.

[qubes-users] never ending Bootstraph phase at 85%

[Catacombs]

Upper right hand side of screen. Cherry Red Icon of two monitors.  Click on it. 
 Choose your internet connection. 


Upper left.  Applications.   Click on it.  Choose says-firewall.  Firefox.  
Which should start Firefox with no protection.  Which should start easier than 
Whonix or Tor.  Search.  What is my IP

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/8cfb7ecb-93af-4825-a892-a235b28b596f%40googlegroups.com.

[qubes-users] Install Qubes in Odroid H2,

[Catacombs]

Qubes must be installed “bare metal”.  Nothing underneath it.I have not 
done so, I. believe  Ubuntu could be a guest OS.  

Those error messages presume Qubes was installed first.   Beware Qubes can want 
to take over the entirety of drives on computer.  Might not be mandatory with 
the latest Qubes. As you can guess. Security mandates not having any thing else 
on computer.  

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/7a2d8ec6-23ea-4a82-bfbc-911e61cfec2b%40googlegroups.com.

[qubes-users] thinkpad x220: ," unsupported hardware error" during install, black screen after install

[Catacombs]

Another work around is to burn the Qubes iso onto a DVD. Boot from that DVD and 
install.   Seems to work every time.   I get an error message but the resulting 
Linux seems to work. I am not satisfied. I will work on this some more next 
week. 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/51ebb7bf-64a8-417a-945f-ba6f47e47bb2%40googlegroups.com.

[qubes-users] thinkpad x220: ," unsupported hardware error" during install, black screen after install

[Catacombs]

Hi. I have had some different symptoms with different distros on different 
computers.  In one set of cases of installing a distribution of Linux on a USB 
key it does strange things. A live version on a USB key will start run as 
though it is happy. Then when I install off the same USB key, the result on the 
hard drive will give an error message.  When I look up the error message it is 
the boot is not correct.  Some fellow said something about copying three files 
into boot sector.  Since I have not the slightest idea of which three files 
from what directory. That was not much help.  I once put Mint Linux on a USB 
key.  It worked.  I installed it onto aa Samsung SSD onto a 2009 Mac Book Pro. 
MBP started functioned all right. When I tried to Shut Down the process went on 
for twenty minutes and I had to hard Power Off it off and the SSD would not 
boot.  I finally put a spinning hard drive in MBP to get it to allow me to 
install Linux on it. I put Ubuntu on the USB key. When I boot up the USB key, I 
see a message, Mint Linux,  then it will start up Ubuntu. I believe programs 
which install Linux distributions don’t alway clear off old boot sectors and 
write information fresh onto boot sector.One needs to clear off everything 
on flash drive, including boot sector.  And write Qubes on flash.  Like wise I 
am suspicious of distributions auto installers as they seem to not redo boot 
sectors.  Probably some part of allowing multiple distros to be on same drive.  
I also feel some auto installers will give more functional results if an 
Ethernet Cable is plugged in through out the distribution install process.  

Clobbering boot sectors on either a USB key or a drive seems to require efforts 
with different software.  Boot Sectors are not always so get rid of.  

Not sure if this is how the install went wrong.  Please let us know how you 
fixed it.  

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/f2bdd9ae-8003-4611-bf2b-ebeb9f7a673f%40googlegroups.com.

Re: [qubes-users] Privacy Screen. How to

[Catacombs]

I will have to get some kind of WiFi antenna as well.   My risk as a 70 year 
old diabetic with heart disease is not ending at Easter 2020. So yes. I will 
look at the antenna when Social Security gets paid.  I will try to do my own 
research now that I can get online. 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/b74678ef-4b2b-4055-9753-d4dda648a59c%40googlegroups.com.

Re: [qubes-users] Privacy Screen. How to

[Catacombs]

Unmans suggestion worked. Actually I did not get the privacy screen.  It just. 
Let me on. McDonalds does not have a time limit.  McDs uses Suddenlink, who was 
fined several times for spying on uses, during the Obama. The sites are 
programmed by AT  McDs blocks free software downloads. Like Linux .isos and 
updates. Firefox works but will not update. Windows updates work. 

When I get the chance. I will spend time trying how Qubes might be detected by 
ISP or public WiFi points.  

Thanks for the information on how to get online. 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/2a3ccbbc-49cf-4daa-91cc-cd8024e4180b%40googlegroups.com.

[qubes-users] Privacy Screen. How to

[Catacombs]

I have just installed Qubes on a Lenovo X230 with original Intel WiFi.  I go 
McDonalds to try to use public WiFi. I power up. I get  A box to start Tor 
connection. Which I am pretty sure will not work.  I cancel.  I start Debian 10 
Firefox.  After awhile I get a cherry red connection icon on the upper right 
side of screen.  It shows connections available.  I choose McDs.  McDs has a 
privacy screen. Harden wall.  A button.  Click here to use internet.  Usually.  
Nothing comes up in browser to allow me to get through this.  


By comparison.  If I start Tails Linux.  I can start untrusted browser.  Get it 
to initiate internet contact by typing in 1.1.1.1.  And untrusted browser will 
bring up web page with login button to click on. After starting connection to 
intermet.  I turn off untrusted browser and start tor browser.  


Right now I have very limited time to test what might work as I only have few 
minutes sitting in my car outside McDs.  I do have an iPhone. But my searches 
have not brought up anything that tells me how to solve a problem. 

Thanks for any help.  

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/81a0278e-e024-4744-8595-fd6f54abf6c6%40googlegroups.com.