Re: [qubes-users] X230 vs Purism - real world attack probability

2019-05-25 Thread taii...@gmx.com
On 05/21/2019 09:52 AM, scurge1tl wrote: > I have a question related to the decision about what laptop is the > better option for Qubes usage, from the security point of view, in the > real world. > > The question is related to the IME on Intel, PSP on AMD and other > Hardware holes. I took these

Re: [qubes-users] Re: off topic - invite codes to 'riseup'

2019-05-07 Thread taii...@gmx.com
I can't believe how many people these days think that: * Elite staff (for maximum security) very expensive * Lawyers (privacy focused right? well you gotta have those for that) * Servers and electricity to run them * Bandwidth Are all free, and that thus the email should be free and that they shou

Re: [qubes-users] Help with a good laptop!

2019-05-07 Thread taii...@gmx.com
Just get a T430 and replace the various you facing components like the keyboard, armrest, cover etc so it looks new. This is guaranteed to work and is easy to upgrade. If you want you can later install coreboot/mecleaner (I don't think he really wants to do coreboot etc and its best not to dry up

Re: [qubes-users] Re: How risky is GPU pass-through?

2019-04-27 Thread taii...@gmx.com
On 04/09/2019 08:53 AM, unman wrote: > On Mon, Apr 08, 2019 at 02:32:04PM -0400, taii...@gmx.com wrote: >> On 02/25/2019 04:02 PM, John Mitchell wrote: >>> If I may ask what OS do you use for the host? >>> >> >> Devuan, it is debian without systemd. >&

Re: [qubes-users] Help with hardware

2019-04-27 Thread taii...@gmx.com
On 04/27/2019 05:08 AM, 'mathab' via qubes-users wrote: > Also I am considering buying a laptop is there any laptop that is under 300 > euro (can be used) that will run this os? > Where I live there is a lot of used thinkpads. I would get a g505s or a T430 (and install a T420 keyboard if you hate

Re: [qubes-users] GPU vs NIC: firmware security

2019-04-27 Thread taii...@gmx.com
On 04/15/2019 12:28 AM, demioben...@gmail.com wrote: > My laptop (Lenovo P51) works fantastically with QubesOS. > > It has two GPUs: Intel integrated graphics and a discrete NVIDIA card. For > gaming, I am interested in pass-through of one (NOT both) to a VM. Impossible. Optimus works via muxin

Re: [qubes-users] Re: PS/2 Keyboard and Mouse via USB?

2019-04-08 Thread taii...@gmx.com
I have stated this many times before. The PS/2 thing is from 2011 which is 8 years ago and applies to systems without more than one USB controller. Using PS/2 sends your keystrokes out on the ground wire. It is far better to purchase a motherboard with a second USB controller with separate IOMMU

Re: [qubes-users] Re: How risky is GPU pass-through?

2019-04-08 Thread taii...@gmx.com
On 02/25/2019 04:02 PM, John Mitchell wrote: > If I may ask what OS do you use for the host? > Devuan, it is debian without systemd. I compile most of the related packages though like libvirtd, qemu etc cause the ones from the distro are way too outdated to support what I need. You should get a

Re: [qubes-users] Responding to the Whonix trolls...

2019-04-08 Thread taii...@gmx.com
On 03/01/2019 09:21 PM, unman wrote: > On Fri, Mar 01, 2019 at 07:27:08PM +, Achim Patzner wrote: >> On 28.02.2019 15:10:21, "unman" wrote: >> >> >>> On Thu, Feb 28, 2019 at 11:03:12AM +0100, Achim Patzner wrote: On 20190227 at 22:30 -0800 cooloutac wrote: Whenever I accidenta

Re: [qubes-users] Could Qubes Installation Configuration Be More User Friendly?

2019-04-08 Thread taii...@gmx.com
On 03/05/2019 03:22 PM, cooloutac wrote: > I agree with Chris its more a compatibility issue then an installation issue. > > You really have to research the machine on linux before using it in Qubes. > And have to make sure the bios has the nescessary options before purchase, > which is one of

Re: [qubes-users] i9-9980XE or i9-7980XE on Gigabyte X299 DESIGNARE EX or AMD 2990WX TR on Gigabyte X399 DESIGNARE EX?

2019-04-08 Thread taii...@gmx.com
On 03/15/2019 07:11 PM, jrsmi...@gmail.com wrote: > There's nothing even close to these on the HCL, but would like to know if > anyone has attempted either of these with 4.0.1 and succeeded. These are > essentially the same base hardware as given in the BoM for the recently > announced System76

Re: [qubes-users] coreboot on modern hardware?

2019-04-08 Thread taii...@gmx.com
System seventysuck, pur.idiots etc are LYING about having "open source firmware" System seventysuck also lies about having "made in usa" hardware literally all they did was make a metal case here and somehow a metal box equals a computer in their world. Their "coreboot" is nothing more than a wra

Re: [qubes-users] Re: How risky is GPU pass-through?

2019-02-25 Thread taii...@gmx.com
One of the reasons I hate the qubes mailinglist is because of the large amount of people here who claim to be experts while being absolutely clueless. I max out new games in a VM on my libre firmware piledriver opteron IOMMU-GFX setup. I would say the performance is almost native and that I don't

Re: [qubes-users] g505s BIOS settings for installing 4.0.1

2019-02-25 Thread taii...@gmx.com
On 01/10/2019 10:27 AM, cyber.citi...@tutanota.com wrote: > Hello everyone, > > I'd like to install Qubes 4.0.1 on a g505s, but the installation routine is > telling me that IOMMU/Vt-d/AMD-Vi, and Interrupt Remapping are not available. > I've tried every possible combination of BIOS settings I c

Re: [qubes-users] why mail-list?

2019-02-25 Thread taii...@gmx.com
If you are not smart enough to use a mailinglist you are not smart enough to use linux. Catering to the lowest common denominator is an impossible task that shouldn't be tried as it always comes at the expense of everyone else. ML's are the most secure and best method of communication even better

Re: [qubes-users] Re: Best ideal laptop for Qubes?

2019-02-25 Thread taii...@gmx.com
Get a G505S and install coreboot. no me/psp, 16gb ram max, open cpu/ram init etc. good choice. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubs

Re: [qubes-users] HCL - Purism Librem 15 v4

2019-02-25 Thread taii...@gmx.com
Nice ad. When will you guys finally admit that you aren't selling owner controlled computers and change the name "librem" since they aren't at all libre? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop rec

Re: [qubes-users] Qubes with newer hardware and error messages still safe enough?

2018-12-14 Thread taii...@gmx.com
On 12/14/2018 03:42 PM, Achim Patzner wrote: > On 20181213 at 19:20 -0800 Sphere wrote: >> If only I could establish my own CPU production company I would definitely >> support libre hardware/libreboot/coreboot and such but sadly we are in a >> world with high demands to processing and stuff and

Re: [qubes-users] Qubes with newer hardware and error messages still safe enough?

2018-12-13 Thread taii...@gmx.com
On 12/12/2018 09:11 PM, Sphere wrote: > On Thursday, December 13, 2018 at 9:59:27 AM UTC+8, tai...@gmx.com wrote: >> On 12/12/2018 03:56 PM wrote: >>> New to Qubes with basic Linux knowledge i installed successfully a desktop >>> system with follwing configuration: >>> >>> Qubes 4.0, CPU Ryzen 5 2

Re: [qubes-users] Qubes with newer hardware and error messages still safe enough?

2018-12-12 Thread taii...@gmx.com
On 12/12/2018 03:56 PM, stefanneuhaus2...@gmail.com wrote: > New to Qubes with basic Linux knowledge i installed successfully a desktop > system with follwing configuration: > > Qubes 4.0, CPU Ryzen 5 2400G, MB ASRock B450 Pro4, GPU Radeon R7 370, 32 GB > RAM > > I can update templates and inst

Re: [qubes-users] How many gigabytes of memory is required for G505s?

2018-12-06 Thread taii...@gmx.com
On 12/05/2018 06:19 PM, '我' via qubes-users wrote: > Hello. > > When reading this list I thought G505s A10 is the best laptop for Qubes. > So I'd like to purchase it, but I am wondering how many memory to put in. > > Could you give me some advice? > 2x8GB DDR3 1600mhz SODIMM's so 16GB and yes

Re: [qubes-users] Possible to fix? Qubes (4.0 and earlier) freezes on sleep on a System76 Oryx Pro laptop

2018-12-02 Thread taii...@gmx.com
On 12/01/2018 08:16 PM, Chris Laprise wrote: > On 12/01/2018 05:52 PM, Bryan Beus wrote: >> There's good news. It appears to be a brightness display problem only. >> >> First thing I tried was to leave a youtube video playing before suspend. >> >> When I awoke, the screen remained dark, but the you

Re: [qubes-users] Anyone bought a Dell laptop recently that works with V4

2018-11-29 Thread taii...@gmx.com
IMO buy a W520 and install a quad core ivy bridge CPU - 32GB RAM and you can use open source and open cpu/ram hw init coreboot[1] firmware and also me cleaner to nerf the ME. (disabling ME is impossible) It is easy to find components to refurb it yourself with a new battery/keyboard/palmrest/lid e

Re: [qubes-users] Razor Blade 15

2018-11-26 Thread taii...@gmx.com
On 11/02/2018 05:58 AM, claudas...@gmail.com wrote: > Has anyone sampled the new super machine razor blade 15 with qubes 4.0? > What were your barriers? can you get close to getting full use out of the > laptop with qubes? > > I have already checked the hardware-compatability list and there's no

Re: [qubes-users] Manjaro Spitfire laptop with Qubes 4.x?

2018-11-26 Thread taii...@gmx.com
On 11/11/2018 09:19 PM, Stumpy wrote: > On 11/11/18 9:15 PM, 22...@tutamail.com wrote: >> Interesting and very coolEuro laptop! Seems intriguing but I could >> not find some of the questions I was wondering: >> >> 1) Are the BIOS proprietary? Same as Librem.. >> 2) Has the manufacturer said it

Re: [qubes-users] Gaming on Qubes 4.0

2018-11-26 Thread taii...@gmx.com
On 11/19/2018 04:16 AM, Black Beard wrote: > > Hey guys, > > i updated all of my Domains and bought Crossover Linux. This Software i > installed on my Fedora 29 Domain. > > An example > > I wanted buy a game yesterday via bank transfer and I automatically forwarded > to the appropriate page.

Re: [qubes-users] Thinkpad T400s RYF

2018-11-26 Thread taii...@gmx.com
On 11/13/2018 05:43 AM, qubes-...@tutanota.com wrote: > Outch, bad news :-( Basically I have only two options than: run reasonably > secure QubesOS on a flawed-by-design-HW, or use RYF HW with not so secure OS. > I am not maximalist, but you know, one doesn't go on boat that has holes in > it, e

Re: [qubes-users] HCL - Purism Librem 13 v2

2018-11-26 Thread taii...@gmx.com
On 11/17/2018 02:23 AM, 799 wrote: > Hello, > > Am Sa., 17. Nov. 2018, 02:50 hat taii...@gmx.com > geschrieben: > >> [...] >> ME/PSP is impossible to disable on modern x86 anyone who tries is >> wasting money and setting back the freedom computing movement

Re: [qubes-users] HCL - Purism Librem 13 v2

2018-11-26 Thread taii...@gmx.com
On 11/17/2018 02:06 AM, 799 wrote:> Hello Taiidan, > > Am Sa., 17. Nov. 2018, 03:21 hat taii...@gmx.com > geschrieben: > >> [...] >> I am the counterpart to you guys somehow getting the tech media to >> publish glorified press releases for you and everything I s

Re: [qubes-users] Donation costs

2018-11-16 Thread taii...@gmx.com
Using alipay is super bad considering you would be supporting a country that censors the internet and imprisons people for viewing the "wrong" things. Alibaba's jack ma also invests in and sells surveillance technology which is a real shame because he used to be someone deserving of respect. Cryp

Re: [qubes-users] HCL - Purism Librem 13 v2

2018-11-16 Thread taii...@gmx.com
RE: people who work for purism say i am being unfair I am the counterpart to you guys somehow getting the tech media to publish glorified press releases for you and everything I say is true. People need to know the truth about what they would be purchasing, this issue isn't and never was the fact

Re: [qubes-users] HCL - Purism Librem 13 v2

2018-11-16 Thread taii...@gmx.com
On 11/10/2018 01:33 PM, 'casiu' via qubes-users wrote: > > "We have four ME modules remaining to liberate (and anyone with access to our > BIOS ROM or our BIOS build script > can confirm those claims)." > > Last time i checked Intel still did not hand you over their signing-keys ? > Im happy to

Re: [qubes-users] Motherboard recommendations

2018-10-29 Thread taii...@gmx.com
I have answered this question over 20 times - search before you post! -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To

Re: [qubes-users] Additional USB controllers for a laptop expresscard to PCI-slots

2018-10-27 Thread taii...@gmx.com
On 10/24/2018 01:41 AM, 'awokd' via qubes-users wrote: > > > Unman: >> On Mon, Oct 22, 2018 at 10:40:23AM -0300, Franz wrote: >>> On Mon, Oct 22, 2018 at 10:29 AM unman >>> wrote: >>> >>>> On Mon, Oct 22, 2018 at 09:13:46AM

Re: [qubes-users] Replacement for Lenovo x230 (coreboot'able + high res)

2018-10-27 Thread taii...@gmx.com
On 10/26/2018 07:28 PM, 799 wrote: > Hello, > > I have used two x230 (i5 and i7) in the last email years to run Qubes. > While I love the form factor and battery runtime I would like to move to a > device which has a better screen resolution. > I'd like to have something between 12 and 14inch as I

Re: [qubes-users] My farewell to Qubes OS!

2018-10-27 Thread taii...@gmx.com
No!! comp-sci angel D: you are IMO the best computer security person on the planet and now you leave us :'[ You can't trust the "cloud" - it will always be someone elses computer SGX etc is DRM and a proprietary wintel technology that shouldn't be trusted. You should look in to intergric

Re: [qubes-users] Re: Qubes 4.0 on high(er) end workstations?

2018-10-21 Thread taii...@gmx.com
On 10/19/2018 03:55 AM, shizo wrote: > https://store.vikings.net/vikings-d16-workstation > https://minifree.org/product-category/desktop-pcs/ > https://tehnoetic.com/desktops/tet-d16ws > > you can still see it, but they have crazy prices > and for some reason, the video card is nvidia, not amd >

Re: [qubes-users] Additional USB controllers for a laptop expresscard to PCI-slots

2018-10-21 Thread taii...@gmx.com
No it won't. Expresscard > PCI-e PCI anything WILL NOT WORK - ALL IN SAME IOMMU GROUP. Save money buy one marketed for egpu gaming for $100 or so from bplus tech taiwan - expresscard>pci-e then buy a Sonnet Allegro Pro which is 4 separate USB controllers which will work fine AS LONG AS YOUR LAPT

Re: [qubes-users] Backup verification error

2018-10-17 Thread taii...@gmx.com
Considering how long it takes and the chance for errors I also make a post fsck dd backup of the entire drive/partition and then sha1sum it just in case, which has saved me a few times. I wish there was a choice to use more RAM to make it go faster or what not. -- You received this message becau

Re: [qubes-users] Re: Qubes 4.0 on high(er) end workstations?

2018-10-16 Thread taii...@gmx.com
On 10/16/2018 12:21 PM, Yethal wrote: > W dniu wtorek, 16 października 2018 01:22:58 UTC+2 użytkownik tai...@gmx.com > napisał: >> On 10/15/2018 02:09 PM, Yethal wrote:> It also has a PS/2 port >> (extremely important in Qubes and often overlooked) >> Misinformation. >> >> You instea dwant more th

Re: [qubes-users] Re: Qubes 4.0 on high(er) end workstations?

2018-10-15 Thread taii...@gmx.com
On 10/15/2018 02:09 PM, Yethal wrote:> It also has a PS/2 port (extremely important in Qubes and often overlooked) Misinformation. You instea dwant more than one USB controller on a system so you can have both trusted for keyboard/mice and untrusted for random stuff (all my recs in my other reply

Re: [qubes-users] Qubes / Xen i5 and i7 socket LGA1151 mobo recomendations

2018-10-15 Thread taii...@gmx.com
On 10/15/2018 12:38 PM, Aaron Gray wrote: > Hi, > > I have found my Intel based Z270 Motherboards do not support Qubes, or Xen as > of yet. No consumer board will without difficulty. > Therefore I am asking for suggestions for i5 and i7 socket LGA1151 DDR4 based > motherboards that will run Qu

Re: [qubes-users] Qubes 4.0 on high(er) end workstations?

2018-10-15 Thread taii...@gmx.com
I have many posts on this but since you have an .edu and made a long post yourself here are two great options. You wanna assemble stuff yourself which is pretty easy - I did my first at age 12 and it worked on the first power on. Libre motherboards that work with qubes 4: * KCMA-D8 (90 used on f

Re: [qubes-users] Keyboard backlight color based on active qube

2018-10-13 Thread taii...@gmx.com
Very cool! This is very innovative for security, to prevent typing in the wrong window. I wish unicomp made a keyboard with colors as I can't give up my model M tho :[ -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this gro

Re: [qubes-users] Fujitsu Lifebook U757

2018-10-13 Thread taii...@gmx.com
Just get an a10 g505s and install coreboot (follow awokd's guides), I have made many posts about laptop reccs you can search for with more reccs in case that doesn't work for you for whatever reason. On 10/12/2018 08:38 PM, Chris Laprise wrote: > > My advice is to start looking for a Qubes laptop

Re: [qubes-users] Question before buying a new laptop

2018-10-09 Thread taii...@gmx.com
On 10/06/2018 03:07 PM, ben.thomp...@vfemail.net wrote: > Thanks for your reply. > >>> I have a few questions: >>> How well does passing a dedicated graphics card to a vm work / is gaming >>> in a vm feasible or do i still need dual-boot? >> >> Yeah very feasible many people do it including me. >

Re: [qubes-users] Re: Installation, no AMD-vi, interrupt mapping, etc.

2018-10-04 Thread taii...@gmx.com
Most consumer mobos have broken IOMMU, I suggest instead of wasting your time trying to make it work you simply buy a KCMA-D8 or KGPE-D16 plus used cpu and install coreboot-libre. Without HVM/IOMMU your security will suck. -- You received this message because you are subscribed to the Google Gro

Re: [qubes-users] Question before buying a new laptop

2018-10-02 Thread taii...@gmx.com
On 10/02/2018 04:53 AM, ben.thomp...@vfemail.net wrote: > Hi, > some time ago i discovered qubes, but my laptop did not support it and i > did not follow the developments. > Now my old laptop is broken and i am about to buy a new one. This question has been asked and then answered like 20+ times b

Re: [qubes-users] Purchase advice, Qubes laptop: ASUS ROG Strix GL503GE ?

2018-09-27 Thread taii...@gmx.com
This laptop advice question has been asked around 5 times in the past two weeks and I have answered all of them :D On 09/21/2018 02:43 AM, KajMagnus wrote: > What do you think about installing Qubes OS on this?: > > ASUS ROG Strix GL503GE Gaming laptops are baaad news - in a few years the batter

Re: [qubes-users] Gaming with qubes

2018-09-17 Thread taii...@gmx.com
On 09/15/2018 12:01 AM, David Schissler wrote: > > What is IOMMU-GFX? I can't find any references to the GFX part. > IOMMU for Graphics, it is much more complex to assign a graphics device than a regular device such as a NIC, HBA, etc. -- You received this message because you are subscribed t

Re: [qubes-users] HCL - Purism Librem 13 v2

2018-09-17 Thread taii...@gmx.com
On 09/16/2018 02:51 AM, 'awokd' via qubes-users wrote: > On Sat, September 15, 2018 10:30 am, qubes-...@tutanota.com wrote: >> Hi, during my email conversation with the Todd Weaver That liar comes out of nowhere with his super slick marketing and sets the computing freedom movement back 10 years.

Re: [qubes-users] Time for Laptop Upgrade

2018-09-16 Thread taii...@gmx.com
If you want a laptop get a W520 and install coreboot along with the best available ivybridge CPU plus 32gb ram. You can nerf the me but of course it is not equivilant to actually disabling it which is 100% impossible despite what some might say. If you want a libre desktop or workstation selectio

Re: [qubes-users] Gaming with qubes

2018-09-14 Thread taii...@gmx.com
On 09/14/2018 01:34 PM, card...@cypher.fi wrote: > Hey. > I recently built new pc with Asus PRIME Z370-P, i7-8700k and gtx 1060. I care > about privacy and security If you really do next time don't buy a blobbed and ME'ed PC along with a graphics card from the anti-freedom nvidia that actively p

Re: [qubes-users] Intel Releases New BSD-Licensed Open-Source Firmware Implementation

2018-09-14 Thread taii...@gmx.com
On 09/14/2018 06:20 PM, taii...@gmx.com wrote: > On 09/14/2018 03:01 PM, David Schissler wrote: >> https://www.phoronix.com/scan.php?page=news_item&px=Intel-Slimbootloader >> >> This could be an improvement if someone takes the firmware and deletes tons >> of unn

Re: [qubes-users] HCL - Purism Librem 13 v2

2018-09-14 Thread taii...@gmx.com
Everyone please be aware that purism's marketing is dishonest. Their products do not have open source firmware[1] and the ME is not disabled (the kernel still runs along with mask roms and the me hw init code) Intel chips or any new x86 for that matter do NOT respect your privacy! [1]Their coreb

Re: [qubes-users] Intel Releases New BSD-Licensed Open-Source Firmware Implementation

2018-09-14 Thread taii...@gmx.com
On 09/14/2018 03:01 PM, David Schissler wrote: > https://www.phoronix.com/scan.php?page=news_item&px=Intel-Slimbootloader > > This could be an improvement if someone takes the firmware and deletes tons > of unnecessary stuff. Hopefully this will be rolled out over many lines. > It is nothing n

Re: [qubes-users] Re: Best Laptop for Qubes 4+ and Heads

2018-09-05 Thread taii...@gmx.com
> So, idea - gpu passthrouth to hvm ?! unsuccessful You can't pass a primary GPU. > > I have 16GB ram - Xentop says 15GB are used > > 11 domains: 2 running, 9 blocked, 0 paused. > > Mem 16696288k total, 15389884k used, 1306404k free. > > which is quite enough, but hvm maybe eat more ram. R

Re: [qubes-users] Re: cpu

2018-09-05 Thread taii...@gmx.com
On 09/04/2018 04:24 PM, Roy Bernat wrote: > On Monday, 3 September 2018 13:13:23 UTC-4, Foppe de Haan wrote: >> I'm afraid so, yeah. > > Thank you for your answer . > > i am already 1.5 year with qubes and always hope to better performance . > > i dont know how i will move to other system bu

Re: [qubes-users] Qubes V4 and Windows7-hardware

2018-09-05 Thread taii...@gmx.com
On 09/04/2018 11:20 AM, josefh.maier via qubes-users wrote: > Hello forum. > Actual Intel CPU's do not anymore support Windows 7 and Qubes 4 does > require modern hardware... Thats a myth created by microsoft to force people to buy windows 10 no matter if they want it or not. It is an artificial

Re: [qubes-users] QSB #43: L1 Terminal Fault speculative side channel (XSA-273)

2018-09-02 Thread taii...@gmx.com
Yet another reason to port qubes to POWER - the last owner controlled performance CPU arch. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr..

Re: [qubes-users] Researchers Detail Two New Attacks on TPM Chips

2018-08-30 Thread taii...@gmx.com
No surprise there - TPM's are a proprietary "security" gimmick probably invented for DRM. One doesn't really need them if you use coreboot with an embedded kernel or with grub and kernel code signing and of course write-lock the flash chip. Raptor Engineering/Raptor Computing System's FlexVER is

Re: [qubes-users] Re: USB Printer

2018-08-30 Thread taii...@gmx.com
For future reference I suggest to all to obtain a network printer that supports open command languages for printing such as PS/PCL so that you don't need to rely on USB junk that requires non-free firmware and or will eventually break due to no driver updates for new distros. -- You received this

Re: [qubes-users] Qubes 4.0 SSD Encryption

2018-08-25 Thread taii...@gmx.com
On 08/24/2018 11:44 AM, brendan.h...@gmail.com wrote: > > And if your OPAL drive is backdoored by the manufacturer for a government, > your drive is backdoored whether you're using OPAL or not and depending on > what you wanted > to keep private, you're already screwed. Wrong - if you have an I

Re: [qubes-users] how to forward webcam to a VM?

2018-08-23 Thread taii...@gmx.com
On 08/17/2018 05:08 PM, 'awokd' via qubes-users wrote: > On Fri, August 17, 2018 12:54 pm, Aliaksandr Kavaliou wrote: >> >> Hey Guys! >> after some time i installed Qubes 4.0 and here the usb-proxy goes over the >> grafic icon. But i still can not run my webcam Logitech C920. I attach it >> to the

Re: [qubes-users] Re: Best Laptop for Qubes 4+ and Heads

2018-08-23 Thread taii...@gmx.com
On 08/20/2018 01:21 PM, stallmanro...@gmail.com wrote: > > ME disabled (works!) It is a nice laptop and I recommend it sometimes BUT: As someone with your screen-name I would hope you know that it is impossible to disable ME. In your case the BUP module still runs along with any mask roms - mor

Re: [qubes-users] Qubes 4.0 SSD Encryption

2018-08-23 Thread taii...@gmx.com
On 08/23/2018 01:35 PM, brendan.h...@gmail.com wrote: > On Thursday, August 23, 2018 at 10:30:17 AM UTC-4, Jonathan Seefelder wrote: >> If you keep wear-leveling in mind, and encrypt the ssd before you fill >> it with sensitive data, id suggest an ssd. Ideally, you should encrypt >> /boot also. >

Re: [qubes-users] New Foreshadow exploits CPU bug

2018-08-20 Thread taii...@gmx.com
SGX is another ME service slash intel marketing gimmick invented for DRM not security. If the person who purchased the computer can't examine the VM's running on it then they are not owning it simply licensing it which is why SGX is a bad technology and people shouldn't buy x86. -- You received

Re: [qubes-users] Re: Incredible HD thrashing on 4.0

2018-08-17 Thread taii...@gmx.com
On a NUMA system it could also be swapping pages from an efficient node to a less efficient distant node. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-us

Re: [qubes-users] Re: X470 and IOMMU Groups...

2018-08-16 Thread taii...@gmx.com
On 08/16/2018 10:18 AM, FaB wrote: >> Hi, Taiidan! The OP seemed to recognize it was ideal to have devices in >> >>> separate IOMMU groups, so I assumed he was familiar with the warnings in >>> https://www.qubes-os.org/doc/assigning-devices/#pci-passthrough-issues and >>> just wondering if it

Re: [qubes-users] Re: X470 and IOMMU Groups...

2018-08-16 Thread taii...@gmx.com
On 08/16/2018 07:47 AM, Marcus Linsner wrote: >> >> I've observed that Qubes installation rarely ever succeeds on X370 >> motherboards so I believe the same case applies to X470 motherboards with a >> higher chance of failure since it is newer. The reason for this I believe is >> because these h

Re: [qubes-users] MSI-x support in domU

2018-08-15 Thread taii...@gmx.com
On 08/07/2018 06:41 PM, perme...@gmail.com wrote: > Q: if a domU kernel enables VF devices in a mapped PF device instance, will > the dom0 kernel discover the VF devices? IE: what is the mechanism whereby a > kernel discovers the need for a bus-walk? > This has to work correctly for Xen, no? W

Re: [qubes-users] X470 and IOMMU Groups...

2018-08-15 Thread taii...@gmx.com
On 08/12/2018 03:36 PM, 'awokd' via qubes-users wrote: > > No experience with that exact configuration. You can often passthrough > devices individually even if they are in the same IOMMU group (older > versions of Xen had trouble). This is a bad recommendation security wise and I expect better f

Re: [qubes-users] X470 and IOMMU Groups...

2018-08-08 Thread taii...@gmx.com
I would instead consider the purchase of an owner controlled KCMA-D8 or KGPE-D16 motherboard which you can install libre board+bmc firmware on. They support qubes 4.0 very well and all devices have their own IOMMU group. They are a much better choice than a proprietary firmware PSP laden non-owne

Re: [qubes-users] When 4.1? I want Heads - issue #3388 + Rowhammer?

2018-08-08 Thread taii...@gmx.com
On 08/08/2018 02:18 PM, Andreas Moreiro wrote: > github.com/QubesOS/qubes-issues/issues/3388 > I hope you guys will fix the issue in 4.1. I would do it myself, but don't > have experience. > > Has there been any talk of Qubes and the older Rowhammer attack? > Becase Xen is probably vulnerable: "X

Re: [qubes-users] Re: What CPU are you running for Q 4.0?

2018-05-22 Thread taii...@gmx.com
Generally NVIDIA hates linux so it would be a good idea to purchase an AMD card instead in the future to avoid problems... NVIDIA artificially hobbles IOMMU-GFX on their geforce products by adding bugs to their drivers and they have ruined the nouveau project in a variety of ways. -- You receive

Re: [qubes-users] Re: What CPU are you running for Q 4.0?

2018-05-22 Thread taii...@gmx.com
I would suggest a pre-PSP AMD 16 core 6386SE on a KGPE-D16 board running coreboot-libre or libreboot - 100% open source firmware with no blobs, the D16 and D8 also have cool stuff like OpenBMC, IOMMU-GFX etc. An 8 core 6328 is also a good fast choice. The D16 supports max 2x16 cores, so 32 cores an

Re: [qubes-users] Re: Lenovo G505S Coreboot

2018-05-21 Thread taii...@gmx.com
*ML thread reply* Hey guys you can install the latest microcode now from linux-firmware, no NDA or w/e I believe this is the latest version. See my thread on the coreboot ML for more info. Remember folks the G505S has a piledriver cpu and thus it NEEDS a microcode update to have IOMMU (and thus wo

Re: [qubes-users] Ram Limit

2018-05-18 Thread taii...@gmx.com
On 05/15/2018 11:01 PM, awokd wrote: > I think Thomas is saying he's setting a minimum of 400MB but sees the VM > dropping to 320MB and crashing. Your solution of setting a fixed memory > size and disabling memory balancing on the VM should also work in that > case! Oh no I don't mean that :[ suc

Re: [qubes-users] Re: Critical PGP bugs. Do they possibly affect Split-GPG in Qubes?

2018-05-16 Thread taii...@gmx.com
On 05/15/2018 01:22 AM, john wrote: > On 05/14/18 14:58, Ángel wrote: >> This paper is most interesting for the discovery of multiple ways email >> client leak information on visualization. >> (not clearly stated in the paper: some of them are already fixed, while >> in other cases the developers

Re: [qubes-users] Re: Desperately want Qubes, but can't install on Asus Sabertooth x79

2018-05-16 Thread taii...@gmx.com
On 05/16/2018 03:35 PM, Mindus Amitiel Debsin wrote: > OK, I got Qubes installed and it seems to be working fine. It's not on my > primary SSD drive, but it is working fine on an external SATA drive I > connected. I had to do a UTC time fix to make Whonix work, but I did and now > it works. > >

Re: [qubes-users] Qubes 4.0 won't boot via coreboot grub rescue

2018-05-15 Thread taii...@gmx.com
On 05/14/2018 06:25 PM, awokd wrote: > On Mon, May 14, 2018 8:58 pm, taii...@gmx.com wrote: >> I try the usual syslinux_configfile but I get an "out of memory" error >> how am I to do this? ideas? > Can you step through what you are trying to do and where the e

Re: [qubes-users] Ram Limit

2018-05-15 Thread taii...@gmx.com
On 05/15/2018 11:07 AM, Thomas Druilhe wrote: > Hi, > > We are using Qube-os 3.2 and sometimes we got a problem with RAM usage. Corporate user? > We set up minimum limit at 400Mo but sometimes RAM drop to 320 Mo causing > crash of the application. > > How the amount of RAM can be under the limit

[qubes-users] Qubes 4.0 won't boot via coreboot grub rescue

2018-05-14 Thread taii...@gmx.com
I try the usual syslinux_configfile but I get an "out of memory" error how am I to do this? ideas? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+uns

Re: [qubes-users] 2 Xeon Gold vs i9 for Qubes-OS?

2018-05-12 Thread taii...@gmx.com
On 05/11/2018 04:30 AM, olegden...@gmail.com wrote: > What will be better for Qubes-OS - i9 or Xeon Gold? Does it support two cpu > based system? Thanks. > I wouldn't waste your money on new spyware filled intel junk. I suggest instead purchasing a KGPE-D16 or KCMA-D8 board With the D16 you have

Re: [qubes-users] No Qubes 4 without VT-x?

2018-05-12 Thread taii...@gmx.com
On 05/07/2018 02:56 PM, evo wrote: > Hello! > > Do i understand it correctly, that there is no sense to try Qubes 4.0 > without having VT-x? > > On my Thinkpad W530 I just have VT-d but no VT-x. > > There will be Qubes 3.2.1 for just VT-d machines, isn't it? Your laptop has both you need to either

Re: [qubes-users] Well supported laptops with 64GB system memory?

2018-05-04 Thread taii...@gmx.com
There are no laptops with that much memory let alone one that isn't full of firmware problems your best choice is the W520 (with an ivy bridge cpu) which has open hardware init coreboot with a nerfable ME and 32GB MAX RAM. -- You received this message because you are subscribed to the Google Grou

Re: [qubes-users] Re: Qubes Os4 very slowly comparing to Qubes 3.2

2018-04-30 Thread taii...@gmx.com
On 04/30/2018 04:54 PM, cooloutac wrote: > On Monday, April 30, 2018 at 3:10:30 PM UTC-4, frkl...@gmail.com wrote: >> That could be a good idea John! >> >> I have only one problem. I can not disable Speedstep in the Bios- Uefi >> because there is no Speedstep configuration. >> >> Does anyone kn

Re: [qubes-users] AMD? threadripper / ryzen?

2018-04-30 Thread taii...@gmx.com
On 04/30/2018 08:09 PM, pixel fairy wrote: > ready to ditch intel on desktop (and maybe laptop if anyone has a good > recommendation) > > my understanding is that some amd lines dont have PSP or any such equivalent > to intelME or AMT. The older stuff like socket g34 and c32. > about to jump do

Re: [qubes-users] Re: Lenovo G505S Coreboot

2018-04-30 Thread taii...@gmx.com
On 04/30/2018 08:49 PM, Andrew B wrote: > OK, just to clarify, if I am to build the coreboot image, I need to do that > on the G505s by say running Debian or Ubuntu (presumably could use a Live > disc/USB) or similar and building the image as shown here? > https://www.coreboot.org/Board:lenovo/g

Re: [qubes-users] Guide on installing Qubes and Coreboot with encrypted boot on thinkpads

2018-04-13 Thread taii...@gmx.com
Hey guys you don't need a VGA ROM for the integrated graphics - they use coreboot native init. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubsc

Re: [qubes-users] Keyboard not working: How to make the buying decision?

2018-04-13 Thread taii...@gmx.com
On 04/13/2018 03:01 PM, 00010age...@gmail.com wrote: > Is there a way to know which keyboards are incompatible with QubesOS? > > Or do we just need to keep on buying keyboards until one works? You need to enable the keyboard sys-usb forwarding permission in qubes settings files, there is a guide

Re: [qubes-users] Offtopic :: reasonable secure routers?

2018-04-12 Thread taii...@gmx.com
On 04/12/2018 09:21 AM, Steve Coleman wrote: > On 04/12/18 05:32, Jo wrote: >> My suggestion would be the Turris Omnia. Im using it myself in >> various cases and im very happy with it. > > I second this opinion. Its Open Source (OpenWrt), downloads its own > patches to keep up with any security i

Re: [qubes-users] Q4 Laptops...

2018-04-12 Thread taii...@gmx.com
On 04/12/2018 08:49 AM, cooloutac wrote: > In my case I found uefi mode works better for Qubes. For example using > legacy bios mode i have many wake from sleep problems, such as usb mouse in > sys-usb not working after sleep. system becoming unresponsive. > > Booting in uefi mode I dont' ha

Re: [qubes-users] Another thread on Qubes 4 machines....

2018-04-11 Thread taii...@gmx.com
On 04/11/2018 01:21 PM, Andrew B wrote: > Sorry to beat a dead horse. I am sure folks here are sick of answering > hardware questions. > > So I understand the dev team currently seems to like the Lenovo Thinkpad X1 > Carbon 5th gen. I assume best to get with 16GB RAM (max) and an SSD. I assume

Re: [qubes-users] X230 won't boot into Qubes after installing 4.0

2018-04-11 Thread taii...@gmx.com
On 04/11/2018 08:57 AM, berto0...@gmail.com wrote: > Hi 799, > > just to be clear, my only intention was to help fellow newbie Andreas not to > jump on your attempt to help. >> I am using Coreboot with SeaBIOS as Payload and everything works supernice >> and like the best Laptop I have ever

Re: [qubes-users] Q4 Laptops...

2018-04-11 Thread taii...@gmx.com
On 04/11/2018 03:19 AM, Drew White wrote: > On Wednesday, 11 April 2018 16:55:48 UTC+10, tai...@gmx.com wrote: >> The best you will get is a W520 or W530 where you can install coreboot >> (open hw init + nerfed ME) and have 32GB RAM. > > FYI, I'm happy to see you went with Lenovo. > Best End User

Re: [qubes-users] Q4 Laptops...

2018-04-11 Thread taii...@gmx.com
On 04/11/2018 03:14 AM, Drew White wrote: > On Wednesday, 11 April 2018 16:55:48 UTC+10, tai...@gmx.com wrote: >> What you ask for is impossible, it simply isn't made - no one has a >> laptop with 64GB RAM and 12 threads let alone one that is old enough to >> not have UEFI. > I know that they exi

Re: [qubes-users] Q4 Laptops...

2018-04-10 Thread taii...@gmx.com
What you ask for is impossible, it simply isn't made - no one has a laptop with 64GB RAM and 12 threads let alone one that is old enough to not have UEFI. The best you will get is a W520 or W530 where you can install coreboot (open hw init + nerfed ME) and have 32GB RAM. Purism is not libre - thei

Re: [qubes-users] Re: Cloudflare DNS-over-HTTPS in Qubes?

2018-04-07 Thread taii...@gmx.com
On 04/05/2018 04:54 PM, 799 wrote: > Hello, > > > On 5 April 2018 at 22:38, taii...@gmx.com wrote: > >> Wow people are actually falling for cloudflares "privacy respecting" >> bullshit from a service that uses for example browser fingerprinting on >> e

Re: [qubes-users] Guide on installing Qubes and Coreboot with encrypted boot on thinkpads

2018-04-06 Thread taii...@gmx.com
On 04/06/2018 05:22 AM, 799 wrote: > It seems to me that if I run Coreboot with grub + encrypted boot, there is > no need to run anti evil maid, as the boot partition can't be messed with. Assuming you set the write-lock on the flash descriptor and have a physical anti-tamper sticker on the case s

  1   2   3   4   5   >