Re: [qubes-users] Thinkpwn?
Just to clarify, that means that even if the UEFI is exploited, it does not matter with Qubes? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/9c5bacf8-8d1e-411a-8d2e-01f907b839d8%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Thinkpwn?
Maybe this is a dumb question, but I can't seem to find any threads here on thinkpwn on the qubes group. Should we be turning off our thinkpwn'd computers off until there are bios updates to correct thinkpwn? Specifically, if we have... single boot qubes? dual boot with some other os (windows / osx)? Lastly, perhaps more importantly, once a computer has been thinkpwn'd, is there any way to check? In other words, is it no longer safe to buy a used computer with which to run Qubes off of (in case it has been breached by thinkpwn)? >From my understanding, even if you swap out the hard drive and change the os, >the malicious software survives. That is huge, no? There is a laymen's guide on github.. I am sure that every first-world nation (and at the very least the cryptolocker people--they made millions in two months last year) have ten to twenty people working on honing out the exploit. Toss the old computers, or am I being too paranoid? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/0997e10d-87de-4261-929e-bc1811a13e4f%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Qubes VM Manager: Organize?
> don't > yet know what the new system will look like, so I can't say whether a > folder-based system (like the app menu) will make sense, but something like > that could be a good idea. I've added this suggestion as a comment with a link > back to this thread. Thanks. If you do make it, please try to remember to try to be intuitive... Copy shit that everyone knows.. (Click on triangle to reveal subdirectory or something that runs through most OS guis). Not trying to be rude or imply that qubes is overly complicated.. It just is by its very nature. I am not sure about other people, but I connect to different AppVM's via different VPN locales (of the same VPN provider). Perfect? No, but it saves money, and I bet a bunch of users do something like this. Most VPN's give you 20+ different locales to connect to (London, Paris, Sydney, etc..) It is desirable (when not using tor at least) to set up different ProxyVm's for each AppVM that you use, even if you are using the same vpn company. If I am not the only one out there doing that, it would be really helpful to be able to visualize which appvm connects to which proxyvm (maybe by shading background colour or a dotted line denoting parents/children/siblings when you scroll over the app/proxy to indicate relationships?). And I probably just came up with an unintuitive idea. But if it's intuitive to you too, maybe it would be for more people. Maybe a mouse-hover would bring up a small explanation of 'taint/relationships with other appvm's that are using the same ip? My couple nunsense. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/07c15eea-1e73-4d87-9242-43195eb9a6b7%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Qubes VM Manager: Organize?
I can organize apps/folders in my startup menu ("Application Launcher Menu"),
but I can't seem to organize my VMs in the dom0 Qubes VM Manager.
Am I missing something?
Looking to be able to throw them into 'folders' or something, so that some can
be permanently hidden/grouped as I like.
--
You received this message because you are subscribed to the Google Groups
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/qubes-users/6b8d9010-1390-438f-b54c-d1e3cfce49e0%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
[qubes-users] Re: Fedora Minimal ProxyVPN template?
On Tuesday, August 9, 2016 at 6:18:27 PM UTC, Connor Page wrote: > you can install dunst for minimalist notifications. Thanks. I'll look into it. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/45cb8415-0b8b-48c3-9aed-30b2acececae%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Re: Fedora Minimal ProxyVPN template?
Yeah, found that. I have it working from the minimal template, but am missing the network up/down dialog.. When the qubes-vpn-handler.sh calls su - -c 'notify-send "$(hostname): LINK IS UP." --icon=network-idle' user it doesn't seem to work.. I left the template as empty as possible, downloading only sudo rsyslog NetworkManager-openvpn openvpn When I try to call the su - -c ork-idle' user line in from terminal, it asks me for a password. I am definitely behind the vpn though, just without any dialog boxes. Is it because I am missing gnome? Any way to send a dialog out without having any gui? I am looking to save on RAM and HDD space, so don't want to install anything I do not have to.. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/90b0e94b-c0e8-40e9-804c-0926f2590c86%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Re: Fedora Minimal ProxyVPN template?
Thx. I wasn't really sure about the inheritance. Qubes keeps on blowing my mind. It is actually extremely forgiving. Maybe there are a few more hoops to jump through, but as long as you make copies of your templates, you can't really mess up. Anyway, good to know. I am experimenting with pruning down the fedora23 template and starting one from scratch--not sure which will yield positive results for a minimal fedora openvpn template that I can lock on to. Will update when I figure something out if anyone else has similar interests. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/a7c95d79-2f5f-4b94-a8f1-bef04fd9cd25%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Fedora Minimal ProxyVPN template?
VPN Services usually offer a number of different sites/cities to connect to. I am trying to set up a minimalist bare-bones Fedora23 template that I can base all of my ProxyVM's off of (via cloning), such that I only have to change the .ovpn file within each Proxy in the /rw/config/openvpn folder (and name the ProxyVM accordingly). This would allow me to choose to have a quick way to easily have a distinct proxyvm for each appvm that I can change at will w/o taking up excess memory. Does anyone have this set-up (or a better idea)? If you do, care to share what packages you have pared it down to? Inspired by Olivier Médoc's post below.. https://groups.google.com/d/msg/qubes-users/LkGNj-mCVHI/e0N0FeLFCQAJ -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/b0dca587-1e2d-498a-88d4-b6b9ad9da017%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Re: vpnleak or my vpn
> > Newer VPN instructions at https://www.qubes-os.org/doc/vpn/ Maybe silly, but in my .ovpn file, I should comment out.. #down /etc/openvpn/update-resolv-conf #up /etc/openvpn/update-resolv-conf right? (it is in the .ovpn file given to me by my vpn) dnsleak.com is saying that I am leaking, but not from my ip or the dns server that I am using.. Why would that be? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/dd455cd3-0003-41dd-8bb7-8f60d4d4a293%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Re: vpnleak or my vpn
Maybe silly, but in my .ovpn file, I should comment out.. #down /etc/openvpn/update-resolv-conf #up /etc/openvpn/update-resolv-conf right? (it is in the .ovpn file given to me by my vpn) > Newer VPN instructions at https://www.qubes-os.org/doc/vpn/ -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/76c73c75-749c-41df-873e-de2f466201ae%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Re: vpnleak or my vpn
On Sunday, July 31, 2016 at 7:44:14 AM UTC, bur...@gmail.com wrote: > On Sunday, July 31, 2016 at 1:09:03 AM UTC-4, el...@tutanota.com wrote: > > I set up a vpn in accordance to cprise's advice.. > > https://groups.google.com/d/topic/qubes-users/UbY4-apKScE/discussion. > > > > dnsleaktest.com comes back all good. (shows my vpn's ip address) > > dnsleak.com, however, is showing multiple dns leaks. > > They are, however, from random places all over the world, none of which > > have any connection to my IP. > > Does this have something to do with my vpn or am I setting it up wrong? > > > > Connecting through dhcp to the vpn.. > > > > One thing I am not sure about is where to put are the up/dwn commands. > > Working now, I have in my *.ovpn file, is.. > > > > #down /etc/openvpn/update-resolv-conf > > #up /etc/openvpn/update-resolv-conf > > script-security 2 > > up vpn-setup2.sh > > down vpn-setup2.sh > > > > Is that right? > > > > Here is the dnsleak result. > > Looks like your DNS might be leaking... > > Your IP: 185.57.87.27 > > DNS IP: 37.48.74.75 > > Hostname: hosted-by.leaseweb.com > > Country: Netherlands > > City: Amsterdam > > Looks like your DNS might be leaking... > > Your IP: 185.57.82.27 > > DNS IP: 185.57.82.25 > > Hostname: 185.57.82.25 > > Newer VPN instructions at https://www.qubes-os.org/doc/vpn/ Maybe silly, but in my .ovpn file, I should comment out.. #down /etc/openvpn/update-resolv-conf #up /etc/openvpn/update-resolv-conf right? (it is in the .ovpn file given to me by my vpn) -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/ba054c38-c6f7-4245-8c38-e63f5d915d6f%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Re: vpnleak or my vpn
Maybe silly, but in my .ovpn file, I should comment out.. #down /etc/openvpn/update-resolv-conf #up /etc/openvpn/update-resolv-conf right? (it is in the .ovpn file given to me by my vpn) -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/c00874ef-bac1-4bb0-9329-24df29f0de4d%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] vpnleak or my vpn
I set up a vpn in accordance to cprise's advice.. https://groups.google.com/d/topic/qubes-users/UbY4-apKScE/discussion. dnsleaktest.com comes back all good. (shows my vpn's ip address) dnsleak.com, however, is showing multiple dns leaks. They are, however, from random places all over the world, none of which have any connection to my IP. Does this have something to do with my vpn or am I setting it up wrong? Connecting through dhcp to the vpn.. One thing I am not sure about is where to put are the up/dwn commands. Working now, I have in my *.ovpn file, is.. #down /etc/openvpn/update-resolv-conf #up /etc/openvpn/update-resolv-conf script-security 2 up vpn-setup2.sh down vpn-setup2.sh Is that right? Here is the dnsleak result. Looks like your DNS might be leaking... Your IP: 185.57.87.27 DNS IP: 37.48.74.75 Hostname: hosted-by.leaseweb.com Country: Netherlands City: Amsterdam Looks like your DNS might be leaking... Your IP: 185.57.82.27 DNS IP: 185.57.82.25 Hostname: 185.57.82.25 -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/b8236871-66b7-4d3e-bb7c-1b0eac258d3e%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Re: Qubes Bluetooth (mouse)
> From searching around the qubes mailing list, it sounds like bluetooth in > Qubes is a possibility (though there may be some security implications). Have not figured out Bluetooth yet, but can now confirm.. Logitech's "Unifying" tech (from way back in the day) works like a charm. It is the least amount of effort you will ever do in Qubes, for the most happiness. (That usually means there is some security vulnerability somewhere).. Plug in the usb unifying thingy and.. it works. Being not very technical, this could be a security flaw. But if your attack surface if not within 25 feet, go for it. Tested and working on a mx master. Right click and scroll wheel work, not sure about the other buttons, but don't get your hopes up. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/15b5c669-dfa8-425f-aa79-bd4a6b9c4218%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Qubes Security Bulletin #24 (Critical bug)
> What is best way to verify our system supports these things? I think you can also check out the processor with Intel.. ark.intel.com You can search through the different processors if you are looking to pick up a new computer. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/b31cd45c-2c86-486b-8aea-a2e12d9a0dce%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
