Re: [qubes-users] Installing VPN in Qubes Versus VPN on a Router

2016-11-14 Thread entr0py
entr0py: > taii...@gmx.com: >> On 11/13/2016 07:39 PM, entr0py wrote: >>> taii...@gmx.com: You can use a VMM with a pfsense VM and separate driver domains for the network interfaces, qubes isn't a router operating system... >>> >>> Is there an inherent reason that Qubes should not b

Re: [qubes-users] Installing VPN in Qubes Versus VPN on a Router

2016-11-13 Thread taii...@gmx.com
On 11/13/2016 07:39 PM, entr0py wrote: taii...@gmx.com: VT-d is intels marketing term for IOMMU, you can buy an AMD system that has IOMMU (AMD-Vi) (but not FM2/AM4 as that has PSP). Qubes needs IOMMU not "VT-d" Thanks for reply. I understood this previously but I'm not familiar with AMD's offe

Re: [qubes-users] Installing VPN in Qubes Versus VPN on a Router

2016-11-13 Thread entr0py
taii...@gmx.com: > VT-d is intels marketing term for IOMMU, you can buy an AMD system > that has IOMMU (AMD-Vi) (but not FM2/AM4 as that has PSP). Qubes > needs IOMMU not "VT-d" Thanks for reply. I understood this previously but I'm not familiar with AMD's offerings and didn't realize they had a

Re: [qubes-users] Installing VPN in Qubes Versus VPN on a Router

2016-11-13 Thread taii...@gmx.com
VT-d is intels marketing term for IOMMU, you can buy an AMD system that has IOMMU (AMD-Vi) (but not FM2/AM4 as that has PSP). Qubes needs IOMMU not "VT-d" You can use a VMM with a pfsense VM and separate driver domains for the network interfaces, qubes isn't a router operating system... Ther

Re: [qubes-users] Installing VPN in Qubes Versus VPN on a Router

2016-11-13 Thread Grzesiek Chodzicki
W dniu niedziela, 13 listopada 2016 21:39:29 UTC+1 użytkownik entr0py napisał: > taii...@gmx.com: > > Ideally you would want a blob free coreboot system with no Intel ME or AMD > > PSP type backdoors. > > https://www.coreboot.org/Binary_situation > > Intel is actively trying to nerf free software

Re: [qubes-users] Installing VPN in Qubes Versus VPN on a Router

2016-11-13 Thread entr0py
taii...@gmx.com: > Ideally you would want a blob free coreboot system with no Intel ME or AMD > PSP type backdoors. > https://www.coreboot.org/Binary_situation > Intel is actively trying to nerf free software with Boot Guard/ME, if you buy > a computer with those features it isn't really your com

Re: [qubes-users] Installing VPN in Qubes Versus VPN on a Router

2016-11-13 Thread taii...@gmx.com
Ideally you would want a blob free coreboot system with no Intel ME or AMD PSP type backdoors. https://www.coreboot.org/Binary_situation Intel is actively trying to nerf free software with Boot Guard/ME, if you buy a computer with those features it isn't really your computer. A backdoor in a m

Re: [qubes-users] Installing VPN in Qubes Versus VPN on a Router

2016-11-13 Thread hedron
13. Nov 2016 16:01 by no...@noses.com: > > Am 13.11.2016 um 14:22 schrieb > hed...@tutanota.com> : > > >> 13. Nov 2016 08:48 by >> amad...@riseup.net>> : >> > Thoughts on thispaper and it's conclusions are welcomed > >> > > There is

Re: [qubes-users] Installing VPN in Qubes Versus VPN on a Router

2016-11-13 Thread Achim Patzner
Am 13.11.2016 um 14:22 schrieb hed...@tutanota.com: > 13. Nov 2016 08:48 by amad...@riseup.net : > > We see much correspondence in these forums about installing a VPN > within Qubes. Surely, the most secure place for VPN is to install > on a Router? > You mi

Re: [qubes-users] Installing VPN in Qubes Versus VPN on a Router

2016-11-13 Thread hedron
13. Nov 2016 08:48 by amad...@riseup.net: > We see much correspondence in these forums about installing a VPN within > Qubes. Surely, the most secure place for VPN is to install on a Router? > I say these things after reading the following paper [ > > https://cryptome.org/2013/12/Full-Disclosu

[qubes-users] Installing VPN in Qubes Versus VPN on a Router

2016-11-13 Thread amadaus
We see much correspondence in these forums about installing a VPN within Qubes. Surely, the most secure place for VPN is to install on a Router? I say these things after reading the following paper [ https://cryptome.org/2013/12/Full-Disclosure.pdf ] in which a group of hackers demonstrate that