Re: [qubes-users] Impact of the Intel hyper-threading bug [Skylake & Kaby Lake]?

2017-07-31 Thread private user82
Thanks Unman. 26.07.2017, 17:21, "Unman" <un...@thirdeyesecurity.org>: > On Tue, Jul 25, 2017 at 05:14:45PM +0300, private user82 wrote: >>  I am concerned about the recent bug affecting Skylake and Kaby Lake gen >> Intel processors - >> https://lists.deb

[qubes-users] Impact of the Intel hyper-threading bug [Skylake & Kaby Lake]?

2017-07-25 Thread private user82
I am concerned about the recent bug affecting Skylake and Kaby Lake gen Intel processors - https://lists.debian.org/debian-devel/2017/06/msg00308.html As BIOS updates aren't yet available from many mobo manufacturers, how can we Qubes users best defend ourselves against an exploit? In this post

[qubes-users] Expired certificate warnings for ftp.qubes-os.org

2017-10-16 Thread private user82
Hi, I'm receiving warnings in my browser that the certificates for "ftp.qubes-os.org" and "keys.qubes-os.org" have expired today. SHA256 Fingerprint=42:DE:02:82:3F:8C:27:3E:6B:E0:D0:8B:4F:36:7A:64:23:9F:CD:74:78:2B:82:43:1E:0C:31:AE:0C:B6:54:F3 Signature Algorithm: sha256WithRSAEncryption

[qubes-users] USB exposed to M.2 SSD drives?

2017-11-13 Thread private user82
Browsing the Wikipedia page for the M.2 SSD Form Factor (https://en.wikipedia.org/wiki/M.2), I noticed that multiple buses are exposed through the M.2 connector, including USB. My question is, does this represent an isolation problem for Qubes? I.e. could a malicious USB device bypass the