On Monday, August 21, 2017 at 11:14:15 AM UTC-4, John Maher wrote:
> On Tuesday, May 2, 2017 at 1:14:47 PM UTC-4, Gaiko wrote:
> > Thanks for the reply!
> >
> >
> > my ~/.local/share/applications/mimeapps.list is a bit different than yours,
> > really I was most interested in it handling
On Tuesday, May 2, 2017 at 1:14:47 PM UTC-4, Gaiko wrote:
> Thanks for the reply!
>
>
> my ~/.local/share/applications/mimeapps.list is a bit different than yours,
> really I was most interested in it handling http/https
>
>
> [Default Applications]
> text/html=open_work_vm.desktop
>
I'm thinking an attacker could:
1 Take control of the VM through any given means, and gain the ability to
edit the .desktop file
2 Alter the desktop file so that it opens a malware URL in the VM dedicated
to web browsing
3 Send information from the Thunderbird VM to the less-trusted web browsing
wordswithn...@gmail.com [2017-05-02 17:07
+0200]:
> Any thoughts (Micah or the community), on whether this creates an
> avenue for persistent compromise of a VM?
>
> Maybe there's a way to make this change persistent from the
> TemplateVM, eg store the .desktop file
Thanks for the reply!
my ~/.local/share/applications/mimeapps.list is a bit different than yours,
really I was most interested in it handling http/https
[Default Applications]
text/html=open_work_vm.desktop
x-scheme-handler/http=open_work_vm.desktop
x-scheme-handler/https=open_work_vm.desktop
Gaiko [2017-05-02 03:36 +0200]:
> > What happens if you run `qvm-open-in-vm work https://qubes-os.org` in
> > tbirdVM
>
> it seems to work just fine that way
>
> > and when you run xdg-open https://qubes-os.org in the work VM
> > (without the quotes)?
>
> ok,
On 2017-05-01 at 18:32 -0700, Gaiko wrote:
> On Monday, May 1, 2017 at 6:40:40 PM UTC-4, Ángel wrote:
> > On 2017-05-01 at 12:34 -0700, Gaiko wrote:
> > > Thoughts?
> >
> > Does your desktop file validate?
> > ie. run: desktop-file-validate open_work_vm.desktop
> >
> > If the desktop file is
On Monday, May 1, 2017 at 4:37:37 PM UTC-4, u+q...@bestemt.no wrote:
> Gaiko [2017-05-01 21:34 +0200]:
> > On Wednesday, June 22, 2016 at 2:38:22 PM UTC-4, Micah Lee wrote:
> > > I published a quick blog post explaining how I do this:
> > >
> > >
On 2017-05-01 at 12:34 -0700, Gaiko wrote:
> Thoughts?
Does your desktop file validate?
ie. run: desktop-file-validate open_work_vm.desktop
If the desktop file is malformed, it will be bypassed silently.
--
You received this message because you are subscribed to the Google Groups
Gaiko [2017-05-01 21:34 +0200]:
> On Wednesday, June 22, 2016 at 2:38:22 PM UTC-4, Micah Lee wrote:
> > I published a quick blog post explaining how I do this:
> >
> > https://micahflee.com/2016/06/qubes-tip-opening-links-in-your-preferred-appvm/
>
> This would be
On Thu, Jun 23, 2016 at 2:51 AM, wrote:
> On Wednesday, June 22, 2016 at 2:38:22 PM UTC-4, Micah Lee wrote:
> > I published a quick blog post explaining how I do this:
> >
> >
> https://micahflee.com/2016/06/qubes-tip-opening-links-in-your-preferred-appvm/
>
> cool! thanks!
>
11 matches
Mail list logo