Re: [qubes-users] Re: Kicking the sudoers dead horse

2017-03-14 Thread haaber
Unman wrote: > (You can configure the mime and default associations to use > qvm-open-in-dvm, so you can double click on a file and it will > automatically open disposableVM and display it there.) If you ensure the > disposableVM is spawned offline there is (almost) no chance of data being >

Re: [qubes-users] Re: Kicking the sudoers dead horse

2017-03-14 Thread Andrew David Wong
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 2017-03-13 16:00, Unman wrote: > On Mon, Mar 13, 2017 at 11:50:59AM -0700, hib0...@gmail.com wrote: Four, I am aware of disposable VMs but for a working desktop these are of marginal use outside experimentation, malware

Re: [qubes-users] Re: Kicking the sudoers dead horse

2017-03-14 Thread Andrew David Wong
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 2017-03-13 10:37, Unman wrote: > On Mon, Mar 13, 2017 at 08:13:31AM -0700, hib0...@gmail.com wrote: >> I only skimmed the thread so I apologize for my laziness up >> front if I missed something but I think a few clarifications need >> to be made

Re: [qubes-users] Re: Kicking the sudoers dead horse

2017-03-13 Thread hib0x13
On Monday, March 13, 2017 at 5:00:22 PM UTC-6, Unman wrote: > On Mon, Mar 13, 2017 at 11:50:59AM -0700, hib...@gmail.com wrote: > > > > > > > > Four, I am aware of disposable VMs but for a working desktop these are > > > > of marginal use outside experimentation, malware testing, untrusted web

Re: [qubes-users] Re: Kicking the sudoers dead horse

2017-03-13 Thread Unman
On Mon, Mar 13, 2017 at 11:50:59AM -0700, hib0...@gmail.com wrote: > > > > > > Four, I am aware of disposable VMs but for a working desktop these are of > > > marginal use outside experimentation, malware testing, untrusted web > > > browsing, etc. They are not practical for a work environment

Re: [qubes-users] Re: Kicking the sudoers dead horse

2017-03-13 Thread hib0x13
On Monday, March 13, 2017 at 1:37:04 PM UTC-4, Unman wrote: > On Mon, Mar 13, 2017 at 08:13:31AM -0700, @gmail.com wrote: > > The main purpose of this or any security system is to mitigate risk. I > > suspect we all agree on this? > > > > One advantage of having sudo restricted is it reduces the

Re: [qubes-users] Re: Kicking the sudoers dead horse

2017-03-13 Thread Unman
On Mon, Mar 13, 2017 at 08:13:31AM -0700, hib0...@gmail.com wrote: > The main purpose of this or any security system is to mitigate risk. I > suspect we all agree on this? > > One advantage of having sudo restricted is it reduces the attack foot print > to installing a root level compromise on

Re: [qubes-users] Re: Kicking the sudoers dead horse

2017-03-11 Thread Unman
On Sat, Mar 11, 2017 at 01:10:32PM -0800, Daniel Moerner wrote: > On Friday, March 10, 2017 at 9:55:08 PM UTC-5, Unman wrote: > > So yes, in a very real sense, it doesn't matter > > to me if the qube where I collect mail, (which isn't the qube where I > > read it) is compromised in some way. > >

Re: [qubes-users] Re: Kicking the sudoers dead horse

2017-03-11 Thread Daniel Moerner
On Friday, March 10, 2017 at 9:55:08 PM UTC-5, Unman wrote: > So yes, in a very real sense, it doesn't matter > to me if the qube where I collect mail, (which isn't the qube where I > read it) is compromised in some way. Hi Unman, Could you explain your setup for collecting mail in one Qube and