Re: [qubes-users] Can I have Windows & Qubes on the same laptop?

2020-05-13 Thread Andrew Sullivan 


On Monday, 11 May 2020 12:08:22 UTC+1, unman wrote:
>
> On Mon, May 11, 2020 at 02:31:52AM -0700, Andrew Sullivan wrote: 
> > Sorry if I have double-posted this... 
> > 
> > The link to "multiboot" seems to refer to a conventional dual-boot 
> > installation, where the two OSs are on the same disc.  If the OSs were 
> > installed n physically separate (internal) drives, would this mitigate 
> the 
> > risk (accepting that /boot would be exposed)? 
> > 
> > Probably a naive idea, but is it possible to somhow "switch off" or 
> > inactivate one disc (short of physically removing it)? 
> > 
> > On Monday, 11 May 2020 10:11:47 UTC+1, dhorf-hfr...@hashmail.org wrote: 
> > > 
> > > On Mon, May 11, 2020 at 01:48:58AM -0700, matteochi...@gmail.com 
> > >  wrote: 
> > > 
> > > > Firstly, is it safe to have Windows and Qubes on the same machine? I 
> > > > use VeraCrypt for full disc encryption 
> > > 
> > > veracrypt does not support actual full disc encryption. 
> > > 
> > > 
> > > > Also, I've got a 2TB external HDD, would it be safer to run Qubes 
> from 
> > > > that and keep Windows on my internal drive or is that worse? 
> > > 
> > > if that HDD is connected via USB, i would not recommend installing 
> > > qubes to it. 
> > > while both "install to usb" and "install to hdd" are supported, they 
> > > have major drawbacks. 
> > > 
> > > 
> > > > I want to keep maximum security and keep Windows and Qubes seperate. 
> > > 
> > > this is not possible. 
> > > if you multiboot, you are very far from "maximum security". 
> > > 
> > > 
> > > > Any answers to questions or installation guidance is greatly 
> > > 
> > > https://www.qubes-os.org/doc/multiboot/ 
> > > 
>
>
> Not *double* but *top-posted*. Please don't do this. 
>
> It's not a naive idea - it's a good one. Depending on your machine you 
> may be able to find ways to do this, by installing a kill switch, or by 
> BIOS configuration. 
> You may find that your BIOS allows you to disable certain devices pre 
> boot, and this may enable you to switch between active disks. Have a 
> look.(Depending on what's available this may determine what sort of disk 
> you use to install Qubes) 
> I have an x230 with some extra hardware switches installed to allow for 
> device isolation. With minimal skills you could do the same yourself. 
> Take a look at what's already there and have a think about what you 
> might manage to do. If it's important enough you'll find a way. 
>

A quick update on this.  I've had a look at the User Manuals for some Dell 
laptops (specifically E5470 and M4800) and it seems that it is possible to 
deactivate hard drives on an individual basis in BIOS. It is also possible, 
again in BIOS, to choose what theWiFi on/off switch actually does - it can 
be set to switch off the WWAN card, so if there is a SSD installed there 
that could be easily switched off.

I think this could be used to reduce the risk when two OSs are installed on 
separate drives in the same machine?

Things were easier in the "old days" of PATA drives - I guess you could 
just put a switch in thepower lead to the drive(s)...

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/ddaabaf4-4acd-4180-a817-fe9b39b3ddd4%40googlegroups.com.

Re: [qubes-users] Can I have Windows & Qubes on the same laptop?

2020-05-11 Thread Anil 
> I bought it from the folk at Third Eye Security - you could mail
> supp...@3isec.com to see what they have available.
> They provide customised Thinkpads to order - my x230 had custom switches,
> coreboot, 16GB RAM, 500MB SSD, Qubes installed, for 499GBP.

Do they have a website?

Regards,

अनिल एकलव्य
(Anil Eklavya)

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CAAPfsu8dv_PAzNOu_DeL%2BMa%3DMGvVr4JQ2jq-nJyfSt6yDEYa7Q%40mail.gmail.com.

Re: [qubes-users] Can I have Windows & Qubes on the same laptop?

2020-05-11 Thread unman 
On Mon, May 11, 2020 at 01:35:57PM +, taran1s wrote:
> 
> 
> 
> Could you share where did you buy the X230 with HW switches already
> installed? I didn't see the vendor that would offer this. Thank you !

I bought it from the folk at Third Eye Security - you could mail
supp...@3isec.com to see what they have available.
They provide customised Thinkpads to order - my x230 had custom switches,
coreboot, 16GB RAM, 500MB SSD, Qubes installed, for 499GBP.
They'll also fit nitrocaster mods to get a more intense screen on the
x230, and are always happy to negotiate price depending on what you have.

That reads like an ad. Hope it's not a problem. I've bought a few
machines from them and they've always been great.

In interest of full disclosure - I now do some work for Third Eye, and
they provide server space for some Qubes repositories, the unofficial
Ubuntu and Arch that I run, and the official Tor mirror.

unman

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20200511145744.GA15472%40thirdeyesecurity.org.

Re: [qubes-users] Can I have Windows & Qubes on the same laptop?

2020-05-11 Thread taran1s 


unman:
> On Mon, May 11, 2020 at 04:17:39AM -0700, Andrew Sullivan wrote:
>>
>>
>> On Monday, 11 May 2020 12:08:22 UTC+1, unman wrote:
>>>
>>> On Mon, May 11, 2020 at 02:31:52AM -0700, Andrew Sullivan wrote: 
>>>
>>> Not *double* but *top-posted*. Please don't do this. 
>>>
>>> It's not a naive idea - it's a good one. Depending on your machine you 
>>> may be able to find ways to do this, by installing a kill switch, or by 
>>> BIOS configuration. 
>>> You may find that your BIOS allows you to disable certain devices pre 
>>> boot, and this may enable you to switch between active disks. Have a 
>>> look.(Depending on what's available this may determine what sort of disk 
>>> you use to install Qubes) 
>>> I have an x230 with some extra hardware switches installed to allow for 
>>> device isolation. With minimal skills you could do the same yourself. 
>>> Take a look at what's already there and have a think about what you 
>>> might manage to do. If it's important enough you'll find a way. 
>>>
>>
>> Not *double* but *top-posted*. Please don't do this. - oops, sorry; is this 
>> the right place?
> 
> Yes, it is. Thanks.
> Inline replies are also fine.
> 
>>
>> When I get a suitable laptop (I have a separate post on this) I'll look 
>> into that.  Are you able to share
>> how you implemented hardware switches on your X230? Do you find the X230 
>> "man enough" to run Qubes?  They're not expensive...
>>
> 
> I bought the x230 with HW switches and Qubes installed.
> There's already a switch for WiFi, and control over the
> speakers and Mic.
> There's a micro switch to isolate the mSata SSD or main drive.
> Another for the camera.
> There was option to install a switch to isolate USB/SD slots, but I
> haven't seen that, and wouldn't use it much anyway.
> Coreboot allows you to control many other components.
> 
> The x230 is great - I posted some comparisons here some time back
> between x220/x230 with different configurations. Takeaway was that 16GB
> RAM and fast SSD are optimal.
> As with security, assessing the (wo)manliness of a laptop depends on
> what you will use it for. I'm using an x220 tablet right now, and it's
> fine for multiple qubes, music/video/compiling. I did some video editing
> last week and the x230 was fine. BUT, for various reasons, I don't game, I 
> tend
> not to use heavy graphical components, and I work in terminal *a lot*,
> so I guess you should factor that in to my view.
> 
> unman
> 

Could you share where did you buy the X230 with HW switches already
installed? I didn't see the vendor that would offer this. Thank you !

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/39d92186-c32c-89f4-f91d-3e13db2dc85f%40mailbox.org.


0xA664B90BD3BE59B3.asc
Description: application/pgp-keys

Re: [qubes-users] Can I have Windows & Qubes on the same laptop?

2020-05-11 Thread unman 
On Mon, May 11, 2020 at 12:37:18PM +, Logan wrote:
> On 5/11/20 12:28 PM, unman wrote:
> > 
> > On Mon, May 11, 2020 at 12:25:54PM +, Logan wrote:
> > > On 5/11/20 12:09 PM, unman wrote:
> > > > Screeds and screeds of HTML.
> > > > Can you NOT do this?
> > > > Look at your settings and change to "plain text", at least for this
> > > > list, please
> > > 
> > > 
> > > Sorry to be a nuisance. I believe it is fixed now: I have added
> > > googlegroups.com into my text domains in Thunderbird so it shouldn't 
> > > happen
> > > again.
> > > 
> > 
> > Cheers, thanks.
> > Sorry for the grouchiness - stressful times.
> > 
> No worries mate. It's my first time using a group like this and it's not
> unreasonable to assume some Qubes users are using terminal-based readers.
> Plaintext never goes out of fashion.
> 
> Have a good rest of your day. :)
> 

Time for a drink and bed, I think.
Cheers.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20200511132409.GA14702%40thirdeyesecurity.org.

Re: [qubes-users] Can I have Windows & Qubes on the same laptop?

2020-05-11 Thread Logan 

On 5/11/20 12:28 PM, unman wrote:


On Mon, May 11, 2020 at 12:25:54PM +, Logan wrote:

On 5/11/20 12:09 PM, unman wrote:

Screeds and screeds of HTML.
Can you NOT do this?
Look at your settings and change to "plain text", at least for this
list, please



Sorry to be a nuisance. I believe it is fixed now: I have added
googlegroups.com into my text domains in Thunderbird so it shouldn't happen
again.



Cheers, thanks.
Sorry for the grouchiness - stressful times.

No worries mate. It's my first time using a group like this and it's not 
unreasonable to assume some Qubes users are using terminal-based 
readers. Plaintext never goes out of fashion.


Have a good rest of your day. :)


--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20200511122848.GA14188%40thirdeyesecurity.org.



--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/8de76799-a888-e9e2-728c-fe96d67299c8%40threatmodel.io.


publickey - logan@threatmodel.io.asc.pgp
Description: application/pgp-key


signature.asc
Description: OpenPGP digital signature

Re: [qubes-users] Can I have Windows & Qubes on the same laptop?

2020-05-11 Thread unman 
On Mon, May 11, 2020 at 12:25:54PM +, Logan wrote:
> On 5/11/20 12:09 PM, unman wrote:
> > Screeds and screeds of HTML.
> > Can you NOT do this?
> > Look at your settings and change to "plain text", at least for this
> > list, please
> 
> 
> Sorry to be a nuisance. I believe it is fixed now: I have added
> googlegroups.com into my text domains in Thunderbird so it shouldn't happen
> again.
> 

Cheers, thanks.
Sorry for the grouchiness - stressful times.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20200511122848.GA14188%40thirdeyesecurity.org.

Re: [qubes-users] Can I have Windows & Qubes on the same laptop?

2020-05-11 Thread Logan 

On 5/11/20 12:09 PM, unman wrote:

On Mon, May 11, 2020 at 12:01:49PM +, Logan wrote:

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/e6af715a-fe00-46ec-ddde-24748076ad2b%40threatmodel.io.

   
 
   
   
 Would you be willing to share the URL
   here? If not, could you message me privately? I'm definitely
   interested in reading it.
   
   -Logan
 
 
 
 On 5/11/20 11:58 AM, Mark Fernandes
   wrote:
 
 
   
   On Monday, 11 May 2020 12:08:22 UTC+1, unman wrote:
 ??
 
 
   Depending on your machine you
   
   may be able to find ways to do this, by installing a kill
   switch, or by
   
   BIOS configuration.
   
   You may find that your BIOS allows you to disable certain
   devices pre
   
   boot, and this may enable you to switch between active 
disks.??
 
 
 
 I'm by no means an expert on Qubes or this particular
   issue. However, I am in the midst of writing a Wikibooks book
   on cost-effective end-user security that has a section about
   this. My thoughts in the book are more like RFCs (requests for
   comments) rather than definitive ideas (my hope is that other
   people will further develop, revise, and correct them, as
   applicable). Please take that into account when reading
 them. The section is shown below.
 
 
 
 
 

 https://en.wikipedia.org/wiki/Qubes_OS";
 moz-do-not-send="true">Qubes OS 4.0.3 side-by-side with other https://en.wikipedia.org/wiki/Operating_system";
 moz-do-not-send="true">operating 
systems
 https://en.wikipedia.org/wiki/Qubes_OS";
 moz-do-not-send="true">Qubes OS 4.0.3 is https://www.qubes-os.org/faq/index.html#can-i-run-applications-like-games-which-require-3d-support";
 moz-do-not-send="true">documented as not coping well with https://en.wikipedia.org/wiki/Software";
 moz-do-not-send="true">software that specifically benefits from https://en.wikipedia.org/wiki/Hardware_acceleration";
 moz-do-not-send="true">3D-optimised hardware. Since a user may well want to use such optimisation, the best way to use such optimisation on the same machine 
might be to do something like, or the same as, the following:
 
 
   https://en.wikipedia.org/wiki/Installation_(computer_programs)" 
moz-do-not-send="true">Install a https://en.wikipedia.org/wiki/Linux"; moz-do-not-send="true">Linux https://en.wikipedia.org/wiki/Operating_system"; moz-do-not-send="true">operating system, with good security but still with the capacity for being able to utilise 3D-optimised hardware, on an https://en.wikipedia.org/wiki/SSD"; moz-do-not-send="true">SSD external https://en.wikipedia.org/wiki/Data_storage"; moz-do-not-send="true">drive, such that this other operating system is not run over Qubes, but instead run separate to Qubes.
   When wanting to use this other Linux OS, disable the 
internal drive (containing Qubes) in either:
   
 the https://en.wikipedia.org/wiki/BIOS"; 
moz-do-not-send="true">BIOS,??
   
 
 ??OR IF 
WISHING TO BE MORE SECURE,
 
   
 both the BIOS??
   
 
 as well as by physically 
disconnecting the internal drive
 (this latter option 
might be a good idea to do??
 because https://en.wikipedia.org/wiki/Malware";
 moz-do-not-send="true">malware in a BIOS's https://en.wikipedia.org/wiki/Firmware";
 moz-do-not-send="true">firmware??
 can still connect to 
BIOS-disabled drives).
 
   https://en.wikipedia.org/wiki/Booting"; moz-do-not-send="true">Boot off the SSD to run this other Linux.
   After using the 
non-Qubes installation, because of the possibility of malware being introduced into the BIOS firmware by the non-Qubes installation, optionally https://en.wikipedia.org/wiki/BIOS#Reprogramming"; moz-do-not-send="true">flash the BIOS's firmware to ensure better the Qubes installation isn???t compromised through firmware https://en.wikipedia.org/wiki/Malware"; moz-do-not-send="true">malware when you next use Qubes.
 
 
 By following the above steps, and choosing the 
most secure options in the steps, because of:
 
   the disabli

Re: [qubes-users] Can I have Windows & Qubes on the same laptop?

2020-05-11 Thread unman 
On Mon, May 11, 2020 at 12:01:49PM +, Logan wrote:
> -- 
> You received this message because you are subscribed to the Google Groups 
> "qubes-users" group.
> To unsubscribe from this group and stop receiving emails from it, send an 
> email to qubes-users+unsubscr...@googlegroups.com.
> To view this discussion on the web visit 
> https://groups.google.com/d/msgid/qubes-users/e6af715a-fe00-46ec-ddde-24748076ad2b%40threatmodel.io.

> 
>   
> 
>   
>   
> Would you be willing to share the URL
>   here? If not, could you message me privately? I'm definitely
>   interested in reading it.
>   
>   -Logan
> 
> 
> 
> On 5/11/20 11:58 AM, Mark Fernandes
>   wrote:
> 
>cite="mid:be02e5ea-f7a5-473b-9fd0-1d06a9223...@googlegroups.com">
>   
>   On Monday, 11 May 2020 12:08:22 UTC+1, unman wrote:
> ??
> 
> 
>   Depending on your machine you
>   
>   may be able to find ways to do this, by installing a kill
>   switch, or by
>   
>   BIOS configuration.
>   
>   You may find that your BIOS allows you to disable certain
>   devices pre
>   
>   boot, and this may enable you to switch between active 
> disks.??
> 
> 
> 
> I'm by no means an expert on Qubes or this particular
>   issue. However, I am in the midst of writing a Wikibooks book
>   on cost-effective end-user security that has a section about
>   this. My thoughts in the book are more like RFCs (requests for
>   comments) rather than definitive ideas (my hope is that other
>   people will further develop, revise, and correct them, as
>   applicable). Please take that into account when reading
> them. The section is shown below.
> 
> 
>  id="docs-internal-guid-5cb878be-7fff-1d6d-bc3d-05d7880773a7">
> 
>  
> id="docs-internal-guid-83215b1d-7fff-5294-3335-b19118084401"> style="font-size: 12pt; font-family: Arial; color: rgb(102, 102, 102); 
> background-color: transparent; font-variant-numeric: normal; 
> font-variant-east-asian: normal; vertical-align: baseline; white-space: 
> pre-wrap;">
> 
>  href="https://en.wikipedia.org/wiki/Qubes_OS";
> moz-do-not-send="true">Qubes OS 
> 4.0.3 side-by-side with other  href="https://en.wikipedia.org/wiki/Operating_system";
> moz-do-not-send="true">operating 
> systems
>  href="https://en.wikipedia.org/wiki/Qubes_OS";
> moz-do-not-send="true">Qubes OS 4.0.3 is  href="https://www.qubes-os.org/faq/index.html#can-i-run-applications-like-games-which-require-3d-support";
> moz-do-not-send="true">documented as not coping well with  href="https://en.wikipedia.org/wiki/Software";
> moz-do-not-send="true">software that specifically benefits 
> from  href="https://en.wikipedia.org/wiki/Hardware_acceleration";
> moz-do-not-send="true">3D-optimised hardware. Since a user may well 
> want to use such optimisation, the best way to use such optimisation on the 
> same machine might be to do something like, or the same as, the 
> following:
> 
> 
>style="line-height:1.38;margin-top:0pt;margin-bottom:0pt;" 
> role="presentation"> href="https://en.wikipedia.org/wiki/Installation_(computer_programs)" 
> moz-do-not-send="true">Install style="font-size: 11pt; background-color: transparent; font-variant-numeric: 
> normal; font-variant-east-asian: normal; vertical-align: baseline; 
> white-space: pre-wrap;"> a  href="https://en.wikipedia.org/wiki/Linux"; moz-do-not-send="true"> style="font-size: 11pt; background-color: transparent; font-variant-numeric: 
> normal; font-variant-east-asian: normal; text-decoration-line: underline; 
> text-decoration-skip-ink: none; vertical-align: baseline; white-space: 
> pre-wrap;">Linux  href="https://en.wikipedia.org/wiki/Operating_system"; 
> moz-do-not-send="true">operating 
> system, with good security but 
> still with the capacity for being able to utilise 3D-optimised hardware, on 
> an https://en.wikipedia.org/wiki/SSD"; 
> moz-do-not-send="true">SSD style="font-size: 11pt; background-color: transparent; font-variant-numeric: 
> normal; font-variant-east-asian: normal; vertical-align: baseline; 
> white-space: pre-wrap;"> external  href="https://en.wikipedia.org/wiki/Data_storage"; 
> moz-do-not-send="true">drive style="font-size: 11pt; background-color: transparent; font-variant-numeric: 
> normal; font-variant-east-asian: normal; vertical-align: baseline; 
> white-space: pre-wrap;">, such that this other operating system is not run 
> over Qubes, but instead run separate to Qubes.
>style="line-height:1.38;margin-top:0pt;

Re: [qubes-users] Can I have Windows & Qubes on the same laptop?

2020-05-11 Thread unman 
On Mon, May 11, 2020 at 04:17:39AM -0700, Andrew Sullivan wrote:
> 
> 
> On Monday, 11 May 2020 12:08:22 UTC+1, unman wrote:
> >
> > On Mon, May 11, 2020 at 02:31:52AM -0700, Andrew Sullivan wrote: 
> >
> > Not *double* but *top-posted*. Please don't do this. 
> >
> > It's not a naive idea - it's a good one. Depending on your machine you 
> > may be able to find ways to do this, by installing a kill switch, or by 
> > BIOS configuration. 
> > You may find that your BIOS allows you to disable certain devices pre 
> > boot, and this may enable you to switch between active disks. Have a 
> > look.(Depending on what's available this may determine what sort of disk 
> > you use to install Qubes) 
> > I have an x230 with some extra hardware switches installed to allow for 
> > device isolation. With minimal skills you could do the same yourself. 
> > Take a look at what's already there and have a think about what you 
> > might manage to do. If it's important enough you'll find a way. 
> >
> 
> Not *double* but *top-posted*. Please don't do this. - oops, sorry; is this 
> the right place?

Yes, it is. Thanks.
Inline replies are also fine.

> 
> When I get a suitable laptop (I have a separate post on this) I'll look 
> into that.  Are you able to share
> how you implemented hardware switches on your X230? Do you find the X230 
> "man enough" to run Qubes?  They're not expensive...
> 

I bought the x230 with HW switches and Qubes installed.
There's already a switch for WiFi, and control over the
speakers and Mic.
There's a micro switch to isolate the mSata SSD or main drive.
Another for the camera.
There was option to install a switch to isolate USB/SD slots, but I
haven't seen that, and wouldn't use it much anyway.
Coreboot allows you to control many other components.

The x230 is great - I posted some comparisons here some time back
between x220/x230 with different configurations. Takeaway was that 16GB
RAM and fast SSD are optimal.
As with security, assessing the (wo)manliness of a laptop depends on
what you will use it for. I'm using an x220 tablet right now, and it's
fine for multiple qubes, music/video/compiling. I did some video editing
last week and the x230 was fine. BUT, for various reasons, I don't game, I tend
not to use heavy graphical components, and I work in terminal *a lot*,
so I guess you should factor that in to my view.

unman

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20200511120532.GA13836%40thirdeyesecurity.org.

Re: [qubes-users] Can I have Windows & Qubes on the same laptop?

2020-05-11 Thread Logan 


publickey - logan@threatmodel.io.asc.pgp
Description: application/pgp-key

  
  

On 5/11/20 11:58 AM, Mark Fernandes
  wrote:


  
  On Monday, 11 May 2020 12:08:22 UTC+1, unman wrote:
 


  Depending on your machine you
  
  may be able to find ways to do this, by installing a kill
  switch, or by
  
  BIOS configuration.
  
  You may find that your BIOS allows you to disable certain
  devices pre
  
  boot, and this may enable you to switch between active disks. 



I'm by no means an expert on Qubes or this particular
  issue. However, I am in the midst of writing a Wikibooks book
  on cost-effective end-user security that has a section about
  this. My thoughts in the book are more like RFCs (requests for
  comments) rather than definitive ideas (my hope is that other
  people will further develop, revise, and correct them, as
  applicable). Please take that into account when reading
them. The section is shown below.






Qubes OS 4.0.3 side-by-side with other operating systems
Qubes OS 4.0.3 is documented as not coping well with software that specifically benefits from 3D-optimised hardware. Since a user may well want to use such optimisation, the best way to use such optimisation on the same machine might be to do something like, or the same as, the following:


  Install a Linux operating system, with good security but still with the capacity for being able to utilise 3D-optimised hardware, on an SSD external drive, such that this other operating system is not run over Qubes, but instead run separate to Qubes.
  When wanting to use this other Linux OS, disable the internal drive (containing Qubes) in either:
  
the BIOS,   
  

   OR IF WISHING TO BE MORE SECURE,

  
both the BIOS 
  

as well as by physically disconnecting the internal drive
(this latter option might be a good idea to do 
because malware in a BIOS's firmware 
can still connect to BIOS-disabled drives).

  Boot off the SSD to run this other Linux.
  After using the non-Qubes installation, because of the possibility of malware being introduced into the BIOS firmware by the non-Qubes installation, optionally flash the BIOS's firmware to ensure better the Qubes installation isn’t compromised through firmware malware when you next use Qubes.


By following the above steps, and choosing the most secure options in the steps, because of:

  the disabling of the internal drive via the BIOS,
  the physical disconnection of the drive containing the Qubes installation,   and
  the flashing of the BIOS firmware before the ‘reconnection’ of the 
Qubes installation,

any such other OS should not be able to access or even ‘touch’ the Qubes OS installation, thereby hopefully safeguarding the Qubes installation from attacks conducted through the other presumably-less-secure OS.


  




  

  
Kind regards,

  

  
Mark Fernandes
  



Would you be willing to share the URL
  here? If not, could you message me privately? I'm definitely
  interested in reading it.
  
  -Logan




  -- 
  You received this message because you are subscribed to the Google
  Groups "qubes-users" group.
  To unsubscribe from this group and stop receiving emails from it,
  send an email to qubes-users+unsubscr...@googlegroups.com.
  To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/be02e5ea-f7a5-473b-9fd0-1d06a9223f0c%40googlegroups.com.



  




-- 
You received this message because you are subscribed to the Google Groups "qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/cfe9c216-80e3-1537-f453-fce6c3723175%40threatmodel.io.


publickey - logan@threatmodel.io.asc.pgp
Description: application/pgp-key


signature.asc
Description: OpenPGP digital signature

Re: [qubes-users] Can I have Windows & Qubes on the same laptop?

2020-05-11 Thread Logan 


publickey - logan@threatmodel.io.asc.pgp
Description: application/pgp-key

  
  
Would you be willing to share the URL
  here? If not, could you message me privately? I'm definitely
  interested in reading it.
  
  -Logan



On 5/11/20 11:58 AM, Mark Fernandes
  wrote:


  
  On Monday, 11 May 2020 12:08:22 UTC+1, unman wrote:
 


  Depending on your machine you
  
  may be able to find ways to do this, by installing a kill
  switch, or by
  
  BIOS configuration.
  
  You may find that your BIOS allows you to disable certain
  devices pre
  
  boot, and this may enable you to switch between active disks. 



I'm by no means an expert on Qubes or this particular
  issue. However, I am in the midst of writing a Wikibooks book
  on cost-effective end-user security that has a section about
  this. My thoughts in the book are more like RFCs (requests for
  comments) rather than definitive ideas (my hope is that other
  people will further develop, revise, and correct them, as
  applicable). Please take that into account when reading
them. The section is shown below.






Qubes OS 4.0.3 side-by-side with other operating systems
Qubes OS 4.0.3 is documented as not coping well with software that specifically benefits from 3D-optimised hardware. Since a user may well want to use such optimisation, the best way to use such optimisation on the same machine might be to do something like, or the same as, the following:


  Install a Linux operating system, with good security but still with the capacity for being able to utilise 3D-optimised hardware, on an SSD external drive, such that this other operating system is not run over Qubes, but instead run separate to Qubes.
  When wanting to use this other Linux OS, disable the internal drive (containing Qubes) in either:
  
the BIOS,   
  

   OR IF WISHING TO BE MORE SECURE,

  
both the BIOS 
  

as well as by physically disconnecting the internal drive
(this latter option might be a good idea to do 
because malware in a BIOS's firmware 
can still connect to BIOS-disabled drives).

  Boot off the SSD to run this other Linux.
  After using the non-Qubes installation, because of the possibility of malware being introduced into the BIOS firmware by the non-Qubes installation, optionally flash the BIOS's firmware to ensure better the Qubes installation isn’t compromised through firmware malware when you next use Qubes.


By following the above steps, and choosing the most secure options in the steps, because of:

  the disabling of the internal drive via the BIOS,
  the physical disconnection of the drive containing the Qubes installation,   and
  the flashing of the BIOS firmware before the ‘reconnection’ of the 
Qubes installation,

any such other OS should not be able to access or even ‘touch’ the Qubes OS installation, thereby hopefully safeguarding the Qubes installation from attacks conducted through the other presumably-less-secure OS.


  




  

  
Kind regards,

  

  
Mark Fernandes
  
  -- 
  You received this message because you are subscribed to the Google
  Groups "qubes-users" group.
  To unsubscribe from this group and stop receiving emails from it,
  send an email to qubes-users+unsubscr...@googlegroups.com.
  To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/be02e5ea-f7a5-473b-9fd0-1d06a9223f0c%40googlegroups.com.



  




-- 
You received this message because you are subscribed to the Google Groups "qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/e6af715a-fe00-46ec-ddde-24748076ad2b%40threatmodel.io.


publickey - logan@threatmodel.io.asc.pgp
Description: application/pgp-key


signature.asc
Description: OpenPGP digital signature

Re: [qubes-users] Can I have Windows & Qubes on the same laptop?

2020-05-11 Thread Mark Fernandes 
On Monday, 11 May 2020 12:08:22 UTC+1, unman wrote:
>
>  
>
 Depending on your machine you 
> may be able to find ways to do this, by installing a kill switch, or by 
> BIOS configuration. 
> You may find that your BIOS allows you to disable certain devices pre 
> boot, and this may enable you to switch between active disks. 




I'm by no means an expert on Qubes or this particular issue. However, I am 
in the midst of writing a Wikibooks book on cost-effective end-user 
security that has a section about this. My thoughts in the book are more 
like RFCs (requests for comments) rather than definitive ideas (my hope is 
that other people will further develop, revise, and correct them, as 
applicable). *Please take that into account when reading them.* The section 
is shown below.

--


Qubes OS 4.0.3  side-by-side with 
other operating systems 

Qubes OS 4.0.3  is documented as 
not coping well 

 
with software  that specifically 
benefits from 3D-optimised hardware 
. Since a user may 
well want to use such optimisation, the best way to use such optimisation 
on the same machine might be to do something like, or the same as, the 
following:


   1. 
   
   Install  
   a Linux  operating system 
   , with good security but 
   still with the capacity for being able to utilise 3D-optimised hardware, on 
   an SSD  external drive 
   , such that this other 
   operating system is not run over Qubes, but instead run separate to Qubes.
   2. 
   
   When wanting to use this other Linux OS, disable the internal drive 
   (containing Qubes) in either:
   1. 
  
  the BIOS ,   
  
   OR IF WISHING TO BE MORE SECURE,

   1. 
  
  both the BIOS 
  
as well as by physically disconnecting the internal drive

(this latter option might be a good idea to do 

because malware  in a BIOS's firmware 
 

can still connect to BIOS-disabled drives).

   1. 
   
   Boot  off the SSD to run this 
   other Linux.
   2. 
   
   After using the non-Qubes installation, because of the possibility of 
   malware being introduced into the BIOS firmware by the non-Qubes 
   installation, optionally flash 
    the BIOS's firmware 
   to ensure better the Qubes installation isn’t compromised through firmware 
   malware  when you next use Qubes.
   

By following the above steps, and choosing the most secure options in the 
steps, because of:

   - 
   
   the disabling of the internal drive via the BIOS,
   - 
   
   the physical disconnection of the drive containing the Qubes 
   installation,   and
   - 
   
   the flashing of the BIOS firmware before the ‘reconnection’ of the 
   Qubes installation,
   
any such other OS should not be able to access or even ‘touch’ the Qubes OS 
installation, thereby hopefully safeguarding the Qubes installation from 
attacks conducted through the other presumably-less-secure OS.


--


Kind regards,


Mark Fernandes

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/be02e5ea-f7a5-473b-9fd0-1d06a9223f0c%40googlegroups.com.

Re: [qubes-users] Can I have Windows & Qubes on the same laptop?

2020-05-11 Thread Andrew Sullivan 


On Monday, 11 May 2020 12:08:22 UTC+1, unman wrote:
>
> On Mon, May 11, 2020 at 02:31:52AM -0700, Andrew Sullivan wrote: 
> > Sorry if I have double-posted this... 
> > 
> > The link to "multiboot" seems to refer to a conventional dual-boot 
> > installation, where the two OSs are on the same disc.  If the OSs were 
> > installed n physically separate (internal) drives, would this mitigate 
> the 
> > risk (accepting that /boot would be exposed)? 
> > 
> > Probably a naive idea, but is it possible to somhow "switch off" or 
> > inactivate one disc (short of physically removing it)? 
> > 
> > On Monday, 11 May 2020 10:11:47 UTC+1, dhorf-hfr...@hashmail.org wrote: 
> > > 
> > > On Mon, May 11, 2020 at 01:48:58AM -0700, matteochi...@gmail.com 
> > >  wrote: 
> > > 
> > > > Firstly, is it safe to have Windows and Qubes on the same machine? I 
> > > > use VeraCrypt for full disc encryption 
> > > 
> > > veracrypt does not support actual full disc encryption. 
> > > 
> > > 
> > > > Also, I've got a 2TB external HDD, would it be safer to run Qubes 
> from 
> > > > that and keep Windows on my internal drive or is that worse? 
> > > 
> > > if that HDD is connected via USB, i would not recommend installing 
> > > qubes to it. 
> > > while both "install to usb" and "install to hdd" are supported, they 
> > > have major drawbacks. 
> > > 
> > > 
> > > > I want to keep maximum security and keep Windows and Qubes seperate. 
> > > 
> > > this is not possible. 
> > > if you multiboot, you are very far from "maximum security". 
> > > 
> > > 
> > > > Any answers to questions or installation guidance is greatly 
> > > 
> > > https://www.qubes-os.org/doc/multiboot/ 
> > > 
>
>
> Not *double* but *top-posted*. Please don't do this. 
>
> It's not a naive idea - it's a good one. Depending on your machine you 
> may be able to find ways to do this, by installing a kill switch, or by 
> BIOS configuration. 
> You may find that your BIOS allows you to disable certain devices pre 
> boot, and this may enable you to switch between active disks. Have a 
> look.(Depending on what's available this may determine what sort of disk 
> you use to install Qubes) 
> I have an x230 with some extra hardware switches installed to allow for 
> device isolation. With minimal skills you could do the same yourself. 
> Take a look at what's already there and have a think about what you 
> might manage to do. If it's important enough you'll find a way. 
>

Not *double* but *top-posted*. Please don't do this. - oops, sorry; is this 
the right place?

When I get a suitable laptop (I have a separate post on this) I'll look 
into that.  Are you able to share
how you implemented hardware switches on your X230? Do you find the X230 
"man enough" to run Qubes?  They're not expensive...

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/c0c67440-0541-4a9f-abbd-3d3be78fd49d%40googlegroups.com.

Re: [qubes-users] Can I have Windows & Qubes on the same laptop?

2020-05-11 Thread taran1s 


unman:
> On Mon, May 11, 2020 at 02:31:52AM -0700, Andrew Sullivan wrote:
>> Sorry if I have double-posted this...
>>
>> The link to "multiboot" seems to refer to a conventional dual-boot 
>> installation, where the two OSs are on the same disc.  If the OSs were 
>> installed n physically separate (internal) drives, would this mitigate the 
>> risk (accepting that /boot would be exposed)?
>>
>> Probably a naive idea, but is it possible to somhow "switch off" or 
>> inactivate one disc (short of physically removing it)?
>>
>> On Monday, 11 May 2020 10:11:47 UTC+1, dhorf-hfr...@hashmail.org wrote:
>>>
>>> On Mon, May 11, 2020 at 01:48:58AM -0700, matteochi...@gmail.com 
>>>  wrote: 
>>>
 Firstly, is it safe to have Windows and Qubes on the same machine? I 
 use VeraCrypt for full disc encryption 
>>>
>>> veracrypt does not support actual full disc encryption. 
>>>
>>>
 Also, I've got a 2TB external HDD, would it be safer to run Qubes from 
 that and keep Windows on my internal drive or is that worse? 
>>>
>>> if that HDD is connected via USB, i would not recommend installing 
>>> qubes to it. 
>>> while both "install to usb" and "install to hdd" are supported, they 
>>> have major drawbacks. 
>>>
>>>
 I want to keep maximum security and keep Windows and Qubes seperate. 
>>>
>>> this is not possible. 
>>> if you multiboot, you are very far from "maximum security". 
>>>
>>>
 Any answers to questions or installation guidance is greatly 
>>>
>>> https://www.qubes-os.org/doc/multiboot/ 
>>>
> 
> 
> Not *double* but *top-posted*. Please don't do this.
> 
> It's not a naive idea - it's a good one. Depending on your machine you
> may be able to find ways to do this, by installing a kill switch, or by
> BIOS configuration.
> You may find that your BIOS allows you to disable certain devices pre
> boot, and this may enable you to switch between active disks. Have a
> look.(Depending on what's available this may determine what sort of disk
> you use to install Qubes)
> I have an x230 with some extra hardware switches installed to allow for
> device isolation. With minimal skills you could do the same yourself.
> Take a look at what's already there and have a think about what you
> might manage to do. If it's important enough you'll find a way.
> 

This is quite interesting. Could you be more specific about the extra HW
switches you made for the device isolation? The X230 as far as I
remember has built in HW kill switch for wifi.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/16a60727-ae0d-13fb-1fa7-ce476f3011aa%40mailbox.org.


0xA664B90BD3BE59B3.asc
Description: application/pgp-keys

Re: [qubes-users] Can I have Windows & Qubes on the same laptop?

2020-05-11 Thread unman 
On Mon, May 11, 2020 at 02:31:52AM -0700, Andrew Sullivan wrote:
> Sorry if I have double-posted this...
> 
> The link to "multiboot" seems to refer to a conventional dual-boot 
> installation, where the two OSs are on the same disc.  If the OSs were 
> installed n physically separate (internal) drives, would this mitigate the 
> risk (accepting that /boot would be exposed)?
> 
> Probably a naive idea, but is it possible to somhow "switch off" or 
> inactivate one disc (short of physically removing it)?
> 
> On Monday, 11 May 2020 10:11:47 UTC+1, dhorf-hfr...@hashmail.org wrote:
> >
> > On Mon, May 11, 2020 at 01:48:58AM -0700, matteochi...@gmail.com 
> >  wrote: 
> >
> > > Firstly, is it safe to have Windows and Qubes on the same machine? I 
> > > use VeraCrypt for full disc encryption 
> >
> > veracrypt does not support actual full disc encryption. 
> >
> >
> > > Also, I've got a 2TB external HDD, would it be safer to run Qubes from 
> > > that and keep Windows on my internal drive or is that worse? 
> >
> > if that HDD is connected via USB, i would not recommend installing 
> > qubes to it. 
> > while both "install to usb" and "install to hdd" are supported, they 
> > have major drawbacks. 
> >
> >
> > > I want to keep maximum security and keep Windows and Qubes seperate. 
> >
> > this is not possible. 
> > if you multiboot, you are very far from "maximum security". 
> >
> >
> > > Any answers to questions or installation guidance is greatly 
> >
> > https://www.qubes-os.org/doc/multiboot/ 
> >


Not *double* but *top-posted*. Please don't do this.

It's not a naive idea - it's a good one. Depending on your machine you
may be able to find ways to do this, by installing a kill switch, or by
BIOS configuration.
You may find that your BIOS allows you to disable certain devices pre
boot, and this may enable you to switch between active disks. Have a
look.(Depending on what's available this may determine what sort of disk
you use to install Qubes)
I have an x230 with some extra hardware switches installed to allow for
device isolation. With minimal skills you could do the same yourself.
Take a look at what's already there and have a think about what you
might manage to do. If it's important enough you'll find a way.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/2020050817.GB13469%40thirdeyesecurity.org.

Re: [qubes-users] Can I have Windows & Qubes on the same laptop?

2020-05-11 Thread unman 
On Mon, May 11, 2020 at 11:11:42AM +0200, dhorf-hfref.4a288...@hashmail.org 
wrote:
> On Mon, May 11, 2020 at 01:48:58AM -0700, matteochicarella...@gmail.com wrote:
> 
> > Firstly, is it safe to have Windows and Qubes on the same machine? I
> > use VeraCrypt for full disc encryption
> 
> veracrypt does not support actual full disc encryption.
> 

Really? It looks to me as if it does, and if you extract the loader from
the MBR and use it elsewhere, cleaning the MBR, it looks good to me.

> 
> > Also, I've got a 2TB external HDD, would it be safer to run Qubes from
> > that and keep Windows on my internal drive or is that worse?
> 
> if that HDD is connected via USB, i would not recommend installing
> qubes to it.
> while both "install to usb" and "install to hdd" are supported, they
> have major drawbacks.

perhaps you could expand on this? Do you mean security drawbacks, or
usability? 
I often run Qubes from usb, both installed and live versions, and dont
hit *major* issues. 

> 
> > I want to keep maximum security and keep Windows and Qubes seperate.
> 
> this is not possible.
> if you multiboot, you are very far from "maximum security".
> 

What are the risks here? They will depend on how your system is
configured, and what sort of attack you are open to. And "maximum
security" will change according to your use case.

If you think that it is likely that your machine will be taken, and the
information extracted and used against you, then you will need different
security measures from the case where you are worried about a drive by
attack from a script kiddie.
Assess the risk, and plan accordingly.

> 
> > Any answers to questions or installation guidance is greatly
> 
> https://www.qubes-os.org/doc/multiboot/
> 

+1

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20200511105852.GA13469%40thirdeyesecurity.org.

Re: [qubes-users] Can I have Windows & Qubes on the same laptop?

2020-05-11 Thread matteochicarella . uk 
Thank you for the info

I though VeraCrypt was one of the most secure programs for full disc 
encryption. I know this isn't a Qubes question but do you possibly know a 
better option? Thanks

Also, do you reckon it would be safer to install Qubes on an external drive via 
USB/install it internally alongside Windows or would it be better to use Whonix 
vm in Windows Virtualbox. I mean in regards to file security.

Sorry for the bother, I know these aren't Qubes questions but you clearly 
understand things well. 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/ec28921f-4d67-43c6-a8ec-2dd044733be6%40googlegroups.com.

Re: [qubes-users] Can I have Windows & Qubes on the same laptop?

2020-05-11 Thread Andrew Sullivan 
Sorry if I have double-posted this...

The link to "multiboot" seems to refer to a conventional dual-boot 
installation, where the two OSs are on the same disc.  If the OSs were 
installed n physically separate (internal) drives, would this mitigate the 
risk (accepting that /boot would be exposed)?

Probably a naive idea, but is it possible to somhow "switch off" or 
inactivate one disc (short of physically removing it)?

On Monday, 11 May 2020 10:11:47 UTC+1, dhorf-hfr...@hashmail.org wrote:
>
> On Mon, May 11, 2020 at 01:48:58AM -0700, matteochi...@gmail.com 
>  wrote: 
>
> > Firstly, is it safe to have Windows and Qubes on the same machine? I 
> > use VeraCrypt for full disc encryption 
>
> veracrypt does not support actual full disc encryption. 
>
>
> > Also, I've got a 2TB external HDD, would it be safer to run Qubes from 
> > that and keep Windows on my internal drive or is that worse? 
>
> if that HDD is connected via USB, i would not recommend installing 
> qubes to it. 
> while both "install to usb" and "install to hdd" are supported, they 
> have major drawbacks. 
>
>
> > I want to keep maximum security and keep Windows and Qubes seperate. 
>
> this is not possible. 
> if you multiboot, you are very far from "maximum security". 
>
>
> > Any answers to questions or installation guidance is greatly 
>
> https://www.qubes-os.org/doc/multiboot/ 
>
>
>
>
>

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/6f036494-8cae-4c78-bb35-007a33c6fe77%40googlegroups.com.

Re: [qubes-users] Can I have Windows & Qubes on the same laptop?

2020-05-11 Thread dhorf-hfref . 4a288f10 
On Mon, May 11, 2020 at 01:48:58AM -0700, matteochicarella...@gmail.com wrote:

> Firstly, is it safe to have Windows and Qubes on the same machine? I
> use VeraCrypt for full disc encryption

veracrypt does not support actual full disc encryption.


> Also, I've got a 2TB external HDD, would it be safer to run Qubes from
> that and keep Windows on my internal drive or is that worse?

if that HDD is connected via USB, i would not recommend installing
qubes to it.
while both "install to usb" and "install to hdd" are supported, they
have major drawbacks.


> I want to keep maximum security and keep Windows and Qubes seperate.

this is not possible.
if you multiboot, you are very far from "maximum security".


> Any answers to questions or installation guidance is greatly

https://www.qubes-os.org/doc/multiboot/




-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20200511091142.GF1079%40priv-mua.

[qubes-users] Can I have Windows & Qubes on the same laptop?

2020-05-11 Thread matteochicarella . uk 
Hello, I'm looking to get started on Qubes and can't quite find the answer I'm 
looking for in the documentation.

I have a Windows 10 laptop and I'm looking to keep Windows as my main OS but I 
want to have Qubes also installed as a seperate OS.

Firstly, is it safe to have Windows and Qubes on the same machine? I use 
VeraCrypt for full disc encryption

Also, I've got a 2TB external HDD, would it be safer to run Qubes from that and 
keep Windows on my internal drive or is that worse?

Is there anything special about what I want to do (eg do I have to do something 
differently) I want to keep maximum security and keep Windows and Qubes 
seperate.

Any answers to questions or installation guidance is greatly appreciated, 
thanks for your time and help.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/1295126e-3789-4b6b-b37a-e677dde83a63%40googlegroups.com.