-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hi Andrew,
> It introduces an extra point of failure. I could owned by a corrupted "git 
> clone" operation.  I could also get cloned by a corrupted wget operation.  
> It's one extra thing to audit (if I want to be careful).
Yeah, as I wrote the clone method is the default. I've just removed wget. ;)

> Yes, a lower number would be better.  I used 20 for dramatic effect, because 
> this is enough to crash a computer.
Maybe 10 is enough. I think to add this value as parameter in the settings.

> My computer crashed before I had a chance to whitelist anything.  I would 
> actually rather open them inside a "session VM", but it isn't obvious how to 
> do it.
Now I really understand what happened. I'll add this feature: after the 
installation a HTML page will be displayed. It will contains the instructions 
and eventually the setup page. In this way the user could customize and 
understand what the extension does, *before*  any other interactions with the 
browser.

> It is a great use case though, which is very helpful when designing things.
Yeah, it could be useful. However, currently, it always requires Dom0 
interaction. I think that with that Qubes 4.0 dialog the reuse feature could be 
implemented easily. With this way there isn't the need to interact with Dom0, 
excluding the RPC.

Best Regards,
Raffaele.

-----BEGIN PGP SIGNATURE-----
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=t6kT
-----END PGP SIGNATURE-----

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-devel" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-devel+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-devel@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-devel/SW0bxiyswcFpXjNDq_nhpjNGDhHykCpo44cyl8NZjkKT-rt0dHQMGJ36q6bJGLeT4MeYwUtSbeDmDPpGN0MFzMHHyvKQ_R6UG-D8ZgmPZ6A%3D%40protonmail.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to