Re: [qubes-users] Re: Kernel 4.19.43 breaks sys-whonix too?

[BM-2cTjsegDfZQNGQWUQjSwro6jrWLC9B3MN3]

On Tue, 28 May 2019 10:56:30 +
"'awokd' via qubes-users"  wrote:

> drok...@gmail.com wrote on 5/28/19 1:54 AM:
> > On Monday, May 27, 2019 at 6:32:20 PM UTC-7,
> > bm-2ctjsegdfzqngqw...@bitmessage.ch wrote:  
> >> Interestingly, this apparently problematic 4.19.43 kernel did not
> >> break my Dom0 or Fedora-29, but instead, broke sys-whonix: I can
> >> connect through any chain of net-vms to clearnet, including
> >> through debian-9 VMs with 4.19.43. However, I could not get out to
> >> the internet via sys-whonix, until selecting an older kernel in
> >> sys-whonix itself. I'm not sure if that issue has been noted yet.
> >> A further twist is that updates via tor to onion repos still
> >> worked with the bad kernel in sys-whonix. It was only non-update
> >> traffic that could not make it through sys-whonix. This all
> >> happens with 4.19.43 in Dom0, and with kernel-latest (5-something)
> >> in Dom0, which had no impact on the issue.  
> > 
> > Whonix updating/working fine here.  Maybe try creating a new
> > sys-whonix2 VM from the template, and switch to it. 

Strange, I could update just fine, and the sys-whonix connected to tor
internally just fine, but VMs connecting through it had issues. The same
was true when I made a new  sys-whonix2 on the same kernel (not older
ones).


> Try 4.19.46-3 (in current-testing right now). I'm running it and
> tested debian-9, fedora-29, and whonix-ws through sys-whonix with no
> problems.

Will have to figure out how to grab just this from testing and try,
thanks!

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/A09AB2E5-B979-40CE-9223-51159FB7F928%40mail.bitmessage.ch.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Kernel 4.19.43 breaks sys-whonix too?

[BM-2cTjsegDfZQNGQWUQjSwro6jrWLC9B3MN3]

Interestingly, this apparently problematic 4.19.43 kernel did not break
my Dom0 or Fedora-29, but instead, broke sys-whonix: I can connect
through any chain of net-vms to clearnet, including through debian-9
VMs with 4.19.43. However, I could not get out to the internet via
sys-whonix, until selecting an older kernel in sys-whonix itself. I'm
not sure if that issue has been noted yet. A further twist is that
updates via tor to onion repos still worked with the bad kernel in
sys-whonix. It was only non-update traffic that could not make it
through sys-whonix. This all happens with 4.19.43 in Dom0, and with
kernel-latest (5-something) in Dom0, which had no impact on the issue.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/EAB2741A-9221-490B-AC85-8DDACA040789%40mail.bitmessage.ch.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] My farewell to Qubes OS!

[bm-2ctjsegdfzqngqwuqjswro6jrwlc9b3mn3]

On Thu, 25 Oct 2018 12:21:44 +0200
Joanna Rutkowska  wrote:

> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA256
> 
> Hello Qubes devs and users!
> 
> It's been nearly 9 years[*] since I sent the first internal email
> within ITL to Rafał Wojtczuk and Alex Tereshkin with the original idea
> for making Qubes OS. Shortly after this, we started drafting the
> original architecture and writing some early PoC code...
> 
> Today, I've made an announcement I'm switching focus to another area
> of work and joining the Golem Project as a Chief {Strategy, Security}
> Officer:
> 
> https://www.qubes-os.org/news/2018/10/25/the-next-chapter/
> 
> https://blog.golemproject.net/joanna-rutkowska-joins-golem-as-chief-strategy-security-officer-13f12f0c11c0
> 
> I'd like to thank all the people who made Qubes OS possible, which
> includes: the whole ITL team, all the community contributors, and, of
> course, all the Qubes OS users!
> 
> Qubes OS will continue under the lead of Marek Marczykowski-Górecki,
> who have been a de-facto lead for all the day-to-day development for
> quite some time already!
> 
> Thanks, Marek! Thank you, all!
> 
> Cheers,
> joanna.
> 
> [*] FWIW, the exact date was November 11th, 2009.
> -BEGIN PGP SIGNATURE-
> 
> iQIzBAEBCAAdFiEEtR14vbBDAuE0X2Ly1F2dklVl1NIFAlvRmTYACgkQ1F2dklVl
> 1NIiDxAAtwm3qM1Rq3ow67q5bLu+1VnuM0NQrN/crLu+FDOdaa9XNzSsdWz97UoN
> 2VsRO+RICNttrR7MAaWSgTXtBKOMuSXYc7s5r7VVFtx4qW0xyRaxbr7vBqJRDM5n
> 6eCLdjAFf1Xh8Ju5eDnBJGx41EIywO4Jba3z9+Ww2xyBycQAYY22yRQf6ANlWfwW
> XE0HgBuaJtAEReJc7qpzlG/iwLa/de1eqVa9kOS4HrESllE9wP7qXLrnmwr/yH19
> 2twe3QVS29uVYzPOam6PiCg1PN4AjsYKvihy/Tap11bYfdr1L8OjmE9+KrDPFPek
> MaWlkl/OoiFZsQHhj1somMfFNKH82oTW3zIAZCmmOZgQHgt6T1KDzjehFTASJeFp
> WNmvmowDYfcVYEdjEXQKP78mpxlYz6fChr/A4x3TX64+KsltdZA7l266OMfpXvL4
> Mja4SUvEKqLbyEQxCaDnOwm4cV7k/dHtOXE5fREzUfi+YVu14yVNkPRxg9UpgtCa
> sV/PY7AwOe4JqxV+8VlWWmX0amNf8ZEtz51F2eH6NZZYGaRtTXxTKW6Aad0XHg7p
> 8m2gvH8YWnGPX7ckofcpL7NHR5B6EauXoHKeQZgV9Ix0NQf2CNvBv5ZxZ7IYannH
> mJEcpgRYMtG5b8+x05hBCb7CP5T/tQpt2r5jIK3eqwEzcPY//H8=
> =1ZqA
> -END PGP SIGNATURE-
> 


With only meager success in remote trustless computation (using
homomorphic encryption for example), a system that enables a reasonably
secure, robust, trust-less or verifiable design for general purpose
software and infrastructure actually running in the "cloud" is, in my
opinion, perhaps the hardest and most impactful problem in computer
security currently. If anyone can solve a problem like that in a
realistic way, leave it to Joanna!

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/9E84DBCB-699D-499D-A286-DDEA6F552058%40mail.bitmessage.ch.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Whonix 14 - Updated, just lost Tor Browser for Whonix-dvm??

[bm-2ctjsegdfzqngqwuqjswro6jrwlc9b3mn3]

On Wed, 15 Aug 2018 12:59:06 -0700 (PDT)
sm...@tutamail.com wrote:

> I just transitioned to the new Whonix 14 templates, everything was
> working great however I just updated both the -gw and -ws templates
> and lost the Tor Browser(AnonDist) from the whonix-ws-14-dvm after
> update? When I launch a "whonix-ws-14-dvm" browser I get a pop-up
> asking: "Tor Browser not installed/Start Tor Browser download?".
> 
> What I tried:
> 
> To customize the -dvm's in Debian and Fedora I have run the following
> to customize -dvm's (other then whonix):
> 
> [user@dom0 ~]$ qvm-run -a debian-dvm gnome-terminal
> 
> Then in new terminal of “-dvm” type “firefox” to launch firefox, then
> I customize the browser.
> 
> I tried the following with Whonix-dvm:
> [user@dom0 ~]$ qvm-run -a whonix-ws-14-dvm gnome-terminal
> 
> The problem I am having is:
> 1) The "whonix-ws-14-dvm" starts but no gnome terminal launches?
> 2) Since whonix doesn't use "Firefox" what would I type to launch the
> "Tor Browser"? Assuming I eventually get a gnome terminal to launch
> 3) How do I install the Tor Browser safely into either the template
> or -dvm?
> 
> Other notes:
> - I created an AppVM using the updated "whonix-ws-14" template,
> received a popup that "Tor Browser" is not installed, installed the
> oldest browser per the recommendation on the pop-up, however after
> installing another pop-up states: "Signature looks quite old
> already...check signature looks sane".  I was able to navigate to an
> Onion site, whonix check came back OK.
> 
> 
> Thanks again for the help...
> 


The same happened to me after updates. Running 'update-torbrowser' in
whonix-ws fixed the problem. 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/3607F008-35B9-42BC-A7C1-A2E902625691%40mail.bitmessage.ch.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] How to use wifi card with Kali ?

[bm-2ctjsegdfzqngqwuqjswro6jrwlc9b3mn3]

On Sat, 16 Dec 2017 14:58:23 -
"'awokd' via qubes-users"  wrote:

> On Fri, December 15, 2017 9:07 pm, axel.schwoerer via qubes-users
> wrote:
> > Hello all.
> > I've installed Kali Linux template on Qubes, and I want to know if
> > it possible to use the wifi cards computer or to use an external
> > wifi card (like AWUS036h) ?  
> 
> Short answer is probably. See
> http://theinvisiblethings.blogspot.com/2011/09/playing-with-qubes-networking-for-fun.html
> for some ways you could approach it. Specifics are going to depend on
> if you need the ability to directly access the NIC to craft packets
> for example. The ability to directly attach devices in general to a
> Qube depends on hardware make and model, how well your computer
> supports it, etc.
> 
> -- 


Yes, you can, quite seamlessly actually. Just make a new netvm based
on the debian template with all the kali packages installed, (3) here:
https://www.qubes-os.org/doc/pentesting/kali/, and then use qvm-usb to
attach the external card to that netvm. Use that netvm as the
environment in which you use the USB-nic to do kali pentesting, in
monitor or ad-hoc mode for example. I've done this with the exact card
you listed, and it works wonderfully. 

The same can be done with the internal nic after shutting down the
netvm that normally grabs your internal nic. Of course, you should
consider what other VMs will then auto-connect to the kali-netvm, and
put a stop to that. 

Some usb cards, like tplink chipsets, don't pass through at all with
qvm-usb, even though they show up in the usb-vm, and I'm not really sure
why... Atheros seems to work as a group though.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/F66537DB-DC4A-461B-8123-00243F0AFB4D%40mail.bitmessage.ch.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] nm-applet disappeared

[BM-2cTjsegDfZQNGQWUQjSwro6jrWLC9B3MN3]

On Wed, 1 Jun 2016 08:36:51 -0700
Andrew David Wong  wrote:

> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA512
> 
> On 2016-06-01 06:13, ad5108...@gmail.com wrote:
> > Hi, for some reason my nm-applet has disappeared from my system. I
> >  tried searching around for the cause of this, and the only causes 
> > I could find for Qubes 3 were deletion of the System Tray widget or
> > related to changes in the NetVM template. I'm currently running the
> > default configuration (aside from a few random applications 
> > installed in the fedora-23 template) and my System Tray is
> > present. I have tried restarting the nm-applet, which generates a
> > passed through notification that I'm connected to the network but
> > does not display the applet. I'm not sure how long ago it stopped
> > displaying either, I only noticed it because I wanted to change my
> > network configuration and couldn't see the applet. Is there
> > anything else I should try?
> >   
> 
> Have you already tried restarting the NetVM itself (or the
> whole system)?
> 
> - -- 

By disappeared from the sytsem, I assum you mean you can't see it's
icon, rather than it being not installed. 

Are you running xfce? This happens in fedora xfce sometimes and can be
a bit frustrating. Try resizing the icon and menu bar several times.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/0D5DB04C-F808-4FB2-A693-04CAF1449B96%40mail.bitmessage.ch.
For more options, visit https://groups.google.com/d/optout.