[qubes-users] Re: Qubes not working on Thinkpad T480

2019-09-30 Thread John Smiley
I'm running Qubes 4.02-rc2 on a T480 right now. Works like a charm. Would love to help, but will need more detail about your install steps and failure mode. On Monday, September 23, 2019 at 10:17:08 AM UTC-7, evan.la...@gmail.com wrote: > > Hi all, > > I recently installed Qubes Release

[qubes-users] History and future of secure virtualized environments

2019-08-03 Thread John Smiley
https://www.platformsecuritysummit.com/2018/speaker/pratt/ A bit off topic but one of the most informative 30 minutes I’ve spent in a while and thought I would share. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this

[qubes-users] Argo vs current inter-domain secure communications methods

2019-08-03 Thread John Smiley
I’m curious what the Qubes dev community thinks of the Argo inter-domain comms introduced in 4.12. Is it worth considering as a replacement for the current methods used by Qubes? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe

[qubes-users] Re: Aorus Devices

2019-06-16 Thread John Smiley
You may want to provide some details such as model name or at least chipset and what matters most to you in terms of what you want from Qubes -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving

[qubes-users] Aorus Devices

2019-06-16 Thread John Smiley
I’ve used Quebes with an Aorus Gaming 3, which is an X299 board. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To

Re: [qubes-users] Re: PS/2 Keyboard and Mouse via USB?

2019-04-10 Thread John Smiley
So if you have 4 or more USB controllers isolating one for its exclusive use for kb and mouse is safer than PS/2? If so that eliminates one of the two main reasons I had for buying a new mobo for Qubes. The other is that the new one has a hardware TPM and the one w/o PS/2 only has a firmware

Re: [qubes-users] Whonix Yes or No

2019-02-20 Thread John Smiley
Thanks for all you responses and thoughts. You have presented multiple thoughtfull easy ways to think about this in plain English while politely pointing out the flaws on the originally posed scenario. Although there were several no’s and I understand their choice, my answer is Yes. On Sun, Feb

[qubes-users] Re: Split gpg is just too cool.

2019-01-02 Thread John Smiley
BTW, there is an excellent split config in Qubes for OTP that leverages the standard Linux oathtool, which does exactly the same thing as Google Authenticator, Lastpass Authenticator, etc. They all implement TOTP and generate the same keys given the same starting key and an accurate clock.

[qubes-users] Re: Split gpg is just too cool.

2019-01-02 Thread John Smiley
On Wednesday, January 2, 2019 at 11:54:57 AM UTC-8, John S.Recdep wrote: > On 12/26/18 4:49 AM, > brendan.hoar-re5jqeeqqe8avxtiumw...@public.gmane.org wrote: > > On Tuesday, December 25, 2018 at 9:56:40 PM UTC-5, John Smiley wrote: > >> U2F Proxy is not so cool. So far no j

[qubes-users] Re: How risky is GPU pass-through?

2018-12-31 Thread John Smiley
On Sunday, December 30, 2018 at 1:07:32 AM UTC-8, John Mitchell wrote: > On Sunday, December 30, 2018 at 9:34:58 AM UTC+1, John Smiley wrote: > > No. I knew exactly what you were talking about. That’s okay. You just keep > > on with your mind in neutral. I won’t waste time

[qubes-users] Re: How risky is GPU pass-through?

2018-12-30 Thread John Smiley
No. I knew exactly what you were talking about. That’s okay. You just keep on with your mind in neutral. I won’t waste time n a closed mind. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving

Re: [qubes-users] is dom0 based on Fedora 25?

2018-12-28 Thread John Smiley
Btw, my next hardware purchase was specifically to run Linux with minimal fuss (Linux will run on just about anything if you invest the time to learn and iterate on fussing with it). I didn’t want to do that (been there, done that, too damned old to waste time) I wanted something that was as

Re: [qubes-users] is dom0 based on Fedora 25?

2018-12-28 Thread John Smiley
UTC-7, John Smiley wrote: > > I have a 1080 Ti in one of my Qubes boxes and haven't had any trouble > with the out-of-the-box install with 4.0.1-rc2. This box is dual boot to > Win10 when I want to play games (it was a gaming rig before it was a Qubes > box). May I ask w

[qubes-users] Re: How risky is GPU pass-through?

2018-12-28 Thread John Smiley
Sorry, you are woefully misinformed. I have been on the design teams for two well known clouds. You can disprove your assertion with a simple test. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop

[qubes-users] Re: Split gpg is just too cool.

2018-12-27 Thread John Smiley
"Starting testing with the Qubes 4 advanced features next." Created a "twitter" qube that has exclusive access to the Yubikey key registered with my Twitter account. That key cannot be accessed from any other qube, just as described in the u2f proxy doc. Nice! -- You received this message

Re: [qubes-users] Re: How risky is GPU pass-through?

2018-12-27 Thread John Smiley
On Tuesday, December 25, 2018 at 1:02:05 PM UTC-8, qubenix wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA512 > > Zrubi: > > On 12/23/18 9:34 PM, Demi M. Obenour wrote: > >> Someone I know is interested in using QubesOS. However, they > >> are also a gamer: if they could not have a

[qubes-users] Re: How risky is GPU pass-through?

2018-12-27 Thread John Smiley
If your friend is just poking around with Qubes and doesn't have anything on the gaming box that needs protecting, I say go with dual boot. That's what I did. Running games from within a Xen VM is going to suck performance-wise compared to running naively from Win10. If he *does* have things

Re: [qubes-users] Re: VLAN / Firewll config on router or just use sys-firewall

2018-12-27 Thread John Smiley
On Wednesday, December 26, 2018 at 2:20:15 AM UTC-8, unman wrote: > On Wed, Dec 26, 2018 at 12:55:23AM -0800, John Smiley wrote: > > On Wednesday, December 26, 2018 at 12:52:28 AM UTC-8, John Smiley wrote: > > > Does it make sense to configure a VLAN and associa

[qubes-users] Re: Split gpg is just too cool.

2018-12-27 Thread John Smiley
On Thursday, December 27, 2018 at 6:28:48 PM UTC-8, John Smiley wrote: > WRT the U2F Proxy: I've got a desktop and a laptop running 4.0.1-rc2 that > I've been trying out the U2F proxy with. I have a lengthy issue open on this > documenting the problems I encountered, how I reso

[qubes-users] Re: Split gpg is just too cool.

2018-12-27 Thread John Smiley
WRT the U2F Proxy: I've got a desktop and a laptop running 4.0.1-rc2 that I've been trying out the U2F proxy with. I have a lengthy issue open on this documenting the problems I encountered, how I resolved them, and some changes I think needed to make the docs clearer. I will probably end up

Re: [qubes-users] is dom0 based on Fedora 25?

2018-12-27 Thread John Smiley
I have a 1080 Ti in one of my Qubes boxes and haven't had any trouble with the out-of-the-box install with 4.0.1-rc2. This box is dual boot to Win10 when I want to play games (it was a gaming rig before it was a Qubes box). May I ask what you need to do that requires the Nividia driver? --

Re: [qubes-users] is dom0 based on Fedora 25?

2018-12-27 Thread John Smiley
On Thursday, December 27, 2018 at 4:23:08 PM UTC-8, seshu wrote: > On Thursday, December 27, 2018 at 3:40:06 PM UTC-7, Chris Laprise wrote: > > On 12/27/2018 05:12 PM, seshu wrote: > > > When I do updates of dom0 I notice it is downloading Fedora 25? > > > > > > I ask because I'm trying to figure

[qubes-users] Still a little fuzzy on how a qube uses the default dispvm setting

2018-12-27 Thread John Smiley
I re-read all of the docs on this topic and I think this setting determines which dvm is used when the qube asks to open a document or run a program in a dvm unless it specifies a specific dvm. So the dvm given by this pref would by used by the Qube's File application when you select a file

[qubes-users] Re: Split gpg is just too cool.

2018-12-26 Thread John Smiley
On Wednesday, December 26, 2018 at 6:49:47 AM UTC-8, Brendan Hoar wrote: > On Tuesday, December 25, 2018 at 9:56:40 PM UTC-5, John Smiley wrote: > > U2F Proxy is not so cool. So far no joy getting it to work. Someone on > > reddit > > had similar issues and questions and r

[qubes-users] Re: Hit a bug in 4.0.1-rc2 I haven't been able to reproduce (yet)

2018-12-26 Thread John Smiley
On Wednesday, December 26, 2018 at 6:56:41 AM UTC-8, Brendan Hoar wrote: > On Monday, December 24, 2018 at 5:19:57 PM UTC-5, John Smiley wrote: > > Posting here in case anyone else has seen this: > > > > I started a fedora-29-dvm instance to test keepass > ... &g

[qubes-users] Re: Installing Chrome

2018-12-26 Thread John Smiley
On Thursday, September 29, 2016 at 6:09:43 PM UTC-7, Ted Brenner wrote: > There are two programs I'd like to install to make Qubes more usable. First, > I'd like to install Chrome. Second, I'd like to install Flash (though maybe I > won't need that if I'm using Chrome?). I've searched and

[qubes-users] Re: VLAN / Firewll config on router or just use sys-firewall

2018-12-26 Thread John Smiley
On Wednesday, December 26, 2018 at 12:52:28 AM UTC-8, John Smiley wrote: > Does it make sense to configure a VLAN and associated firewall rules in an > external firewall like pfsense or can the same thing be accomplished with > Qubes firewall rules? For the purposes of isolating Qube

[qubes-users] VLAN / Firewll config on router or just use sys-firewall

2018-12-26 Thread John Smiley
Does it make sense to configure a VLAN and associated firewall rules in an external firewall like pfsense or can the same thing be accomplished with Qubes firewall rules? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this

[qubes-users] 4.0rc2 is not the same as 4.0.1-rc2.

2018-12-25 Thread John Smiley
I see several posts citing 4.0rc2 when it is clear from context that they are talking about 4.0.1-rc2. They are completely different releases. Take care to cite the correct release in your posts. -- You received this message because you are subscribed to the Google Groups "qubes-users"

[qubes-users] Split gpg is just too cool.

2018-12-25 Thread John Smiley
U2F Proxy is not so cool. So far no joy getting it to work. Someone on reddit had similar issues and questions and resolved by installing USB keyboard support. That’s not mentioned in the Qubes docs and I hope we don’t have to resort to that. If that were a requirement, surely the docs would

[qubes-users] Re: Newb Help with Installation

2018-12-25 Thread John Smiley
I install from USB3 stick all the time and it’s fast. Even if it is dropping back to 2.0, it should not be as slow as you describe. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from

[qubes-users] Re: Newb Help with Installation

2018-12-25 Thread John Smiley
I would be more concerned about security than drivers. I connected a Caldigit Plus TB3 hub to my Qubes laptop and it worked fine, but now I had a new threat vector since TB has direct access to the PCI bus. As someone else here noted, there may be a time when they vector is secure, but not yet.

[qubes-users] Hit a bug in 4.0.1-rc2 I haven't been able to reproduce (yet)

2018-12-24 Thread John Smiley
Posting here in case anyone else has seen this: I started a fedora-29-dvm instance to test keepass (as opposed to the outdated keepassx that comes installed with the fedora-29 template), installed it, launched it from xterm, and poked at it for a bit. Part of the poking included clicking

[qubes-users] Re: HCL - Lenovo T480

2018-12-24 Thread John Smiley
On Sunday, December 23, 2018 at 3:47:57 PM UTC-8, Laszlo Zrubecz wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Hi, > > Just installed the 4.0.1-rc > > hit by the UEFI issues described here: > https://www.qubes-os.org/doc/uefi-troubleshooting/ > > Use the workarounds, or

[qubes-users] Re: Newb Help with Installation

2018-12-24 Thread John Smiley
On Sunday, December 23, 2018 at 10:06:26 PM UTC-8, will.w77 wrote: > Hello, > > > > So I'm attempting to install qubes to a usb stick. I've copied the iso onto > the usb by using the dd command specified in the user documentation in ubuntu > virtualbox (host os windows 10). I'm wondering if

Re: [qubes-users] Re: Well color me impressed (4.0.1-rc2 install on laptop and desktop)

2018-12-21 Thread John Smiley
On Friday, December 21, 2018 at 3:39:25 PM UTC-8, unman wrote: > On Thu, Dec 20, 2018 at 09:20:11PM -0800, John Smiley wrote: > > On Thursday, December 20, 2018 at 9:11:34 PM UTC-8, John Smiley wrote: > > > I've been having head-banging issues with 4.0 and 4.0.1-rc1 ever sin

Re: [qubes-users] Re: Well color me impressed (4.0.1-rc2 install on laptop and desktop)

2018-12-21 Thread John Smiley
On Friday, December 21, 2018 at 3:39:25 PM UTC-8, unman wrote: > On Thu, Dec 20, 2018 at 09:20:11PM -0800, John Smiley wrote: > > On Thursday, December 20, 2018 at 9:11:34 PM UTC-8, John Smiley wrote: > > > I've been having head-banging issues with 4.0 and 4.0.1-rc1 ever sin

[qubes-users] Re: Well color me impressed (4.0.1-rc2 install on laptop and desktop)

2018-12-20 Thread John Smiley
On Thursday, December 20, 2018 at 9:11:34 PM UTC-8, John Smiley wrote: > I've been having head-banging issues with 4.0 and 4.0.1-rc1 ever since I > became a fledgling Qubes user a few weeks ago. I never did get Qubes working > well with Whonix 14 on the desktop. > > When 4.0

[qubes-users] Well color me impressed (4.0.1-rc2 install on laptop and desktop)

2018-12-20 Thread John Smiley
I've been having head-banging issues with 4.0 and 4.0.1-rc1 ever since I became a fledgling Qubes user a few weeks ago. I never did get Qubes working well with Whonix 14 on the desktop. When 4.0.1-rc2 came out the other day, I made a new bootable USB stick with it and replaced Ubuntu on my

[qubes-users] Questions

2018-12-19 Thread John Smiley
If one were to invest in a new laptop today for Qubes use exclusively and price wasn't a major factor, which one(s) make the top of the list? Assume you want the best security possible and are willing to invest the time to learn and configure Qubes/Whonix to get it. Also assume you want

[qubes-users] Re: VPN for Linux Dummies

2018-12-19 Thread John Smiley
On Monday, December 17, 2018 at 12:09:48 PM UTC-8, stefanne...@gmail.com wrote: > With Qubes 4.0 i got stuck with VPN (NordVPN) installation because i have > only basic knowledge of linux. > > I found a lot of info, but most relevant are these from the Qubes Github: > >

[qubes-users] Going old school

2018-12-18 Thread John Smiley
Just ordered a (native - no USB conversion) Logitech PS/2 keyboard and mouse and a PS/2 splitter since I only have one PS/2 port. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it,

Re: [qubes-users] Re: Upgrade guide from 4.0 to latest recommended build

2018-12-16 Thread John Smiley
On Sunday, December 16, 2018 at 4:12:56 AM UTC-8, unman wrote: > On Sat, Dec 15, 2018 at 06:31:35PM -0800, John Smiley wrote: > > On Saturday, December 15, 2018 at 6:24:49 PM UTC-8, unman wrote: > > > On Sat, Dec 15, 2018 at 06:18:43PM -0800, John Smiley wrote: > > >

Re: [qubes-users] PS/2 Combo keyboard / mouse port

2018-12-16 Thread John Smiley
On Sunday, December 16, 2018 at 4:11:14 AM UTC-8, unman wrote: > On Sat, Dec 15, 2018 at 10:13:49PM -0800, John Smiley wrote: > > Read some interesting things about USB on your site and now I want to > > change over from USB keyboard and mouse to PS/2. My mobo ha

[qubes-users] Re: How many gigabytes of memory is required for G505s?

2018-12-16 Thread John Smiley
On Wednesday, December 5, 2018 at 3:19:42 PM UTC-8, 我 wrote: > Hello. > > When reading this list I thought G505s A10 is the best laptop for Qubes. > So I'd like to purchase it, but I am wondering how many memory to put in. > > Could you give me some advice? Memory is pretty cheap and it has a

[qubes-users] PS/2 Combo keyboard / mouse port

2018-12-15 Thread John Smiley
Read some interesting things about USB on your site and now I want to change over from USB keyboard and mouse to PS/2. My mobo has a single port that combines both in what they (Gigabyte) describe as a PS/2 port. Can I just slap an adapter onto my existing keyboard and mouse (say a PS/2 port

Re: [qubes-users] Re: Upgrade guide from 4.0 to latest recommended build

2018-12-15 Thread John Smiley
On Saturday, December 15, 2018 at 6:24:49 PM UTC-8, unman wrote: > On Sat, Dec 15, 2018 at 06:18:43PM -0800, John Smiley wrote: > > On Saturday, December 15, 2018 at 4:59:59 PM UTC-8, unman wrote: > > > On Sat, Dec 15, 2018 at 03:42:29PM -0800, John Smiley wrote: > > >

Re: [qubes-users] Re: Upgrade guide from 4.0 to latest recommended build

2018-12-15 Thread John Smiley
On Saturday, December 15, 2018 at 4:59:59 PM UTC-8, unman wrote: > On Sat, Dec 15, 2018 at 03:42:29PM -0800, John Smiley wrote: > > On Saturday, December 15, 2018 at 3:19:16 PM UTC-8, John Smiley wrote: > > > On Saturday, December 15, 2018 at 3:02:13 PM UTC-8, 22...@tutamai

Re: [qubes-users] Re: Upgrade guide from 4.0 to latest recommended build

2018-12-15 Thread John Smiley
On Saturday, December 15, 2018 at 4:47:19 PM UTC-8, unman wrote: > On Sat, Dec 15, 2018 at 03:19:15PM -0800, John Smiley wrote: > > On Saturday, December 15, 2018 at 3:02:13 PM UTC-8, 22...@tutamail.com > > wrote: > > > Some typos corrected and clarification added:

[qubes-users] Upgrade existing templates or install fresh ones?

2018-12-15 Thread John Smiley
Let's say we're talking specifically about the Fedora template. Are there necessary/required/desirable configuration items that only persist when upgrading (say from 26 to 28) or does a fresh install of 28 behave the same as an upgraded 26? Are there additional steps that need to be taken

Re: [qubes-users] Re: Upgrade guide from 4.0 to latest recommended build

2018-12-15 Thread John Smiley
On Saturday, December 15, 2018 at 3:19:16 PM UTC-8, John Smiley wrote: > On Saturday, December 15, 2018 at 3:02:13 PM UTC-8, 22...@tutamail.com wrote: > > Some typos corrected and clarification added: > > > > > > John, > > I'll take a shot at helping but would

Re: [qubes-users] Re: Upgrade guide from 4.0 to latest recommended build

2018-12-15 Thread John Smiley
On Saturday, December 15, 2018 at 3:02:13 PM UTC-8, 22...@tutamail.com wrote: > Some typos corrected and clarification added: > > > John, > I'll take a shot at helping but would defer to Unman who has helped me out a > lot, both directly and indirectly on this forum. > > Some notes: > Been

[qubes-users] Re: Upgrade guide from 4.0 to latest recommended build

2018-12-15 Thread John Smiley
On Saturday, December 15, 2018 at 1:09:59 AM UTC-8, John Smiley wrote: > I'm interested in what and in what order, upgrades should be applied starting > from a base 4.0 install. I've tried several times and gotten jammed up each > time. I've also tried starting with 4.0.1-rc1, but had

[qubes-users] Upgrade guide from 4.0 to latest recommended build

2018-12-15 Thread John Smiley
I'm interested in what and in what order, upgrades should be applied starting from a base 4.0 install. I've tried several times and gotten jammed up each time. I've also tried starting with 4.0.1-rc1, but had problems with that out of the box where sys-whonix would die right away. 4.0 at least

[qubes-users] FIDO2 / Webauthn?

2018-12-15 Thread John Smiley
Just finished looking at the new U2F support being added: https://www.qubes-os.org/news/2018/09/11/qubes-u2f-proxy/ Any thoughts/plans to include Webauthn FIDO2 support at some point? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To

Re: [qubes-users] TPM usage

2018-12-14 Thread John Smiley
I thought that the TPM provided hardware accelerated block encryption ciphers in addition to key storage. The Wikipedia page for TPM certainly makes it sound that way but I can find nothing indicating that LUKS uses those capabilities when present. -- You received this message because you

Re: [qubes-users] TPM usage

2018-12-14 Thread John Smiley
So Xen just sets up LUKS without the TPM even if it’s there? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to

[qubes-users] Re: Does anyone trust this for meaningful anonymity?

2018-12-14 Thread John Smiley
On Thursday, December 13, 2018 at 8:21:43 PM UTC-8, John Smiley wrote: > I only ask because my, admittedly limited, exposure left me with no > confidence at all that it would protect me. I was hitting software and doc > bugs left and right. They haven’t gotten basics down yet, so no

[qubes-users] TPM usage

2018-12-13 Thread John Smiley
>From the docs: TPM with proper BIOS support (required for Anti Evil Maid) Is that it? Qubes does not use the TPM for disk encryption? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails

[qubes-users] Does anyone trust this for meaningful anonymity?

2018-12-13 Thread John Smiley
I only ask because my, admittedly limited, exposure left me with no confidence at all that it would protect me. I was hitting software and doc bugs left and right. They haven’t gotten basics down yet, so no way I can trust. Fun toy though. -- You received this message because you are

[qubes-users] password style

2018-12-13 Thread John Smiley
Diceware dude -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to