If I think a computer has been infected, is there anything else I should
wipe/re-install other than
1. Hard Drive / Operating System
2. BIOS
Is there anything else that a hacker could possibly infect that needs to be
wiped/re-installed..?
Thanks
--
You received this message because you are
On 09/23/2016 03:22 PM, Marek Marczykowski-Górecki wrote:
'/usr/lib/qubes/qrexec-client-vm dom0 qubes.ReceiveUpdates
/usr/lib/qubes/qfile-agent /var/lib/qubes/dom0-updates/packages/*.rpm' failed with exit code 1!
Check /var/log/qubes/qrexec.sys-firewall.log. I'd guess it is something
about pack
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
On Tue, Sep 27, 2016 at 12:53:54PM +0200, Tobias Abenius wrote:
> On 09/23/2016 03:22 PM, Marek Marczykowski-Górecki wrote:
>
> > > '/usr/lib/qubes/qrexec-client-vm dom0 qubes.ReceiveUpdates
> > > /usr/lib/qubes/qfile-agent
> > > /var/lib/qubes/dom0
Hey Qubes-Team,
https://www.qubes-os.org/doc/hvm/
states that "shared templates for HVM domains" are not supported.
This is an outdated information, isn't it?
Robert
--
You received this message because you are subscribed to the Google Groups
"qubes-users" group.
To unsubscribe from this
Hi fellows,
I started using qubes a while ago and I have a question concerning backups.
What I want is a complete backup to a dedicated external USB HDD. I understand
to achieve this all the VMs must be shut down.
Therefore when I plugged in the HDD I mounted it in dom0 under /mnt.
Questions:
1.
On 09/25/2016 05:36 PM, Marek Marczykowski-Górecki wrote:
What about disabling xscreensaver completely for 120 mins?
Something like:
xscreensaver-command -exit
sleep 7200
xscreensaver &
No settings are changed, so unexpected system reboot isn't a problem.
Easy, if it's safe(?)
bump
--
Regards
--
You received this message because you are subscribed to the Google Groups
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@google
"An agenda against Qubes goal". Lol, that would been really arrogant because I
joined Linux only 3 months ago and I have everything to learn.
But if you want to talk about what Qubes provides, I have my opinion on the
subject : Qubes greatest innovation is kinda making business of privacy rights
'Gabriel' via qubes-users:
> Hi fellows,
>
> I started using qubes a while ago and I have a question concerning backups.
> What I want is a complete backup to a dedicated external USB HDD. I
> understand to achieve this all the VMs must be shut down.
> Therefore when I plugged in the HDD I mounte
On Monday, September 26, 2016 at 4:00:38 AM UTC-4, Drew White wrote:
> On Monday, 26 September 2016 15:31:19 UTC+10, Foppe de Haan wrote:
> > usb input devices? if so, can you attach a ps/2 mouse/keyboard and does
> > that do anything? also, maybe have a look at bios settings related to
> > (sle
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512
On 2016-09-27 06:59, 'Gabriel' via qubes-users wrote:
> Hi fellows,
>
> I started using qubes a while ago and I have a question concerning backups.
> What I want is a complete backup to a dedicated external USB HDD. I
> understand to achieve this a
On Sunday, September 25, 2016 at 7:32:34 AM UTC-4, Chris Laprise wrote:
> On 09/25/2016 07:08 AM, johnyju...@sigaint.org wrote:
> >> Let's say I have a Qubes machine connected to a 2nd laptop by Ethernet.
> >>
> >> The Qubes machine is sharing its Internet connection.
> >>
> >> Let's say the Qubes
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512
On 2016-09-27 06:45, Robert Mittendorf wrote:
> Hey Qubes-Team,
>
> https://www.qubes-os.org/doc/hvm/
>
> states that "shared templates for HVM domains" are not supported.
>
> This is an outdated information, isn't it?
>
> Robert
>
Correct.
> If I think a computer has been infected, is there anything else I should
> wipe/re-install other than
>
> 1. Hard Drive / Operating System
>
> 2. BIOS
>
> Is there anything else that a hacker could possibly infect that needs to
> be wiped/re-installed..?
Lol, don't get me started...
- Any PCI c
On Tuesday, September 27, 2016 at 6:51:31 AM UTC-4, neilh...@gmail.com wrote:
> If I think a computer has been infected, is there anything else I should
> wipe/re-install other than
>
> 1. Hard Drive / Operating System
>
> 2. BIOS
>
> Is there anything else that a hacker could possibly infect t
On Tuesday, September 27, 2016 at 2:31:33 PM UTC-4, johny...@sigaint.org wrote:
> > If I think a computer has been infected, is there anything else I should
> > wipe/re-install other than
> >
> > 1. Hard Drive / Operating System
> >
> > 2. BIOS
> >
> > Is there anything else that a hacker could pos
Hi everybody,
I'm back with a brand-new workstation setup to try Qubes on. I bought a
Matrox C680 and hooked up six monitors to its DisplayPort outputs. I'm
using Qubes R3.2 fully updated as of now, with XFCE.
Long story short, dom0 is able to use all six monitors in the
configuration I set up (tw
>> Especially if you did the sharing via a separate vpn or ssh tunnel. But
>> in general, I don't think Qubes security should be considered much if
>> any benefit to adjacent non-Qubes systems.
>>
>> Chris
>>
>> > The benefits far outweigh the risks, as long as you don't do most of
>> your
>> > cri
> I forget which blackhat event, they showed how you can think you are
> flashing a bios. But the malware will remain.
That's creepy. Don't most BIOS flashing utilities do a verification? Or
perhaps the flashing utility itself is what was compromised in the
blackhat demo.
Another reason why d
> I'm back with a brand-new workstation setup to try Qubes on. I bought a
> Matrox C680 and hooked up six monitors to its DisplayPort outputs. I'm
> using Qubes R3.2 fully updated as of now, with XFCE.
Six monitors??? Wow!
Can I come over and hang out at your place?
JJ
--
You received this me
On Tuesday, September 27, 2016 at 2:56:27 PM UTC-4, johny...@sigaint.org wrote:
> > I forget which blackhat event, they showed how you can think you are
> > flashing a bios. But the malware will remain.
>
> That's creepy. Don't most BIOS flashing utilities do a verification? Or
> perhaps the f
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
On Tue, Sep 27, 2016 at 08:47:27PM +0200, Alex wrote:
> Hi everybody,
> I'm back with a brand-new workstation setup to try Qubes on. I bought a
> Matrox C680 and hooked up six monitors to its DisplayPort outputs. I'm
> using Qubes R3.2 fully updated
On Tuesday, September 27, 2016 at 2:56:27 PM UTC-4, johny...@sigaint.org wrote:
> > I forget which blackhat event, they showed how you can think you are
> > flashing a bios. But the malware will remain.
>
> That's creepy. Don't most BIOS flashing utilities do a verification? Or
> perhaps the f
> On Tuesday, September 27, 2016 at 6:51:31 AM UTC-4, neilh...@gmail.com
> wrote:
>> If I think a computer has been infected, is there anything else I should
>> wipe/re-install other than
>>
>> 1. Hard Drive / Operating System
>>
>> 2. BIOS
This also brings up the question of BIOS vs. EFI, which h
On 09/27/2016 09:19 PM, Marek Marczykowski-Górecki wrote:
> Wow... The problem is that gui-agent have hardcoded maximum of 4
> outputs[1]. The number is totally arbitrary, can be changed to
> anything. Any ideas for better value? Apparently 4 isn't large
> enough...
That's good to know, and that ex
On Wednesday, June 22, 2016 at 8:26:50 AM UTC-7, Marcus at WetwareLabs wrote:
> Hello all,
>
> I've been tinkering with GPU passthrough these couple of weeks and I thought
> I should now share some of my findings. It's not so much unlike the earlier
> report on GPU passthrough here
> (https://g
On Sunday, September 25, 2016 at 9:46:13 AM UTC-4, nishi...@gmail.com wrote:
> Hello,
>
> I am surprised that there is no way to disable ipv6 on Debian template.
>
> I reinstalled first the template using documentation
> https://www.qubes-os.org/doc/reinstall-template/
>
> Then I added "net.ipv
Also just to add qubes devs have fedora template with less listening process
then debian-8 which is not default and more community based. But if you want
to use use debian instead for your sysnet or firewall or w/e. You can disable
all the listening processes yourself.
--
You received this
On Tuesday, September 27, 2016 at 3:35:54 PM UTC-4, johny...@sigaint.org wrote:
> > On Tuesday, September 27, 2016 at 6:51:31 AM UTC-4, neilh...@gmail.com
> > wrote:
> >> If I think a computer has been infected, is there anything else I should
> >> wipe/re-install other than
> >>
> >> 1. Hard Drive
I also have one qubes bios machine and another i use legacy boot on. But your
right int he future we will be forced to all use uefi.
--
You received this message because you are subscribed to the Google Groups
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from i
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
On Tue, Sep 27, 2016 at 09:40:15PM +0200, Alex wrote:
> On 09/27/2016 09:19 PM, Marek Marczykowski-Górecki wrote:
> > Wow... The problem is that gui-agent have hardcoded maximum of 4
> > outputs[1]. The number is totally arbitrary, can be changed to
How about Google Chromebooks which have a system to auto-restore the OS if it
thinks it's been tampered with..?
Or what about a read-only BIOS in the first place..?
Is there any reason BIOS can't be read-only..?
I basically want a computer which is most easy to wipe/reinstall and then it's
tru
> How about Google Chromebooks which have a system to auto-restore the OS if
> it thinks it's been tampered with..?
Doesn't that imply trust in Google, who is known to cooperate with NSA and
such (as required by US law)?
I have had serious problems with a hacked Android phone, and the
"weirdness"
> Also just to add qubes devs have fedora template with less listening
> process then debian-8 which is not default and more community based. But
> if you want to use use debian instead for your sysnet or firewall or w/e.
> You can disable all the listening processes yourself.
It's an outstandin
> The "listening" services are less of a concern, since the firewall
> wouldn't permit any incoming connections to be passed through to start
> with. It's the "phone home" style services, like time sync, Samba name
> lookups on microsoft servers, and such, that are more concerning, and
> privacy-b
raahe...@gmail.com:
> or just only allow https in the vm firewall settings.
I assume you mean whitelisting TCP port 443? If so, be aware that while
this will stop most non-HTTPS traffic, there is nothing that prevents
other protocols from using port 443. It's a fairly well-known attack on
Tor's
> My PC's RT clock might drift by a few seconds each week
Actually, it's not even that bad. I'm sure I've fired up motherboards or
laptops that haven't been touched in years, and their clocks were accurate
within a minute.
So there's no need for synchronizing your time so frequently.
I just rea
johnyju...@sigaint.org:
>> The "listening" services are less of a concern, since the firewall
>> wouldn't permit any incoming connections to be passed through to start
>> with. It's the "phone home" style services, like time sync, Samba name
>> lookups on microsoft servers, and such, that are more
On Tue, Sep 27, 2016 at 12:41:12PM -0700, raahe...@gmail.com wrote:
> On Sunday, September 25, 2016 at 9:46:13 AM UTC-4, nishi...@gmail.com wrote:
> > Hello,
> >
> > I am surprised that there is no way to disable ipv6 on Debian template.
> >
> > I reinstalled first the template using documentatio
On Tue, Sep 27, 2016 at 09:13:30PM -, johnyju...@sigaint.org wrote:
> > My PC's RT clock might drift by a few seconds each week
>
> Actually, it's not even that bad. I'm sure I've fired up motherboards or
> laptops that haven't been touched in years, and their clocks were accurate
> within a
On Tue, Sep 27, 2016 at 09:15:47PM +, Jeremy Rand wrote:
> johnyju...@sigaint.org:
> >> The "listening" services are less of a concern, since the firewall
> >> wouldn't permit any incoming connections to be passed through to start
> >> with. It's the "phone home" style services, like time sync
> Like many encrypted tunnel setups, Tor requires both ends to have similar
> date/time. You can easily test this by manually setting to the wrong
> time, and watching the Tor fail.
>
> Tor also checks your local date/time against the consensus status
> document, and will warn you if it's off. If
Yeah, Joanna is seriously epic.
How about Raspberry Pi..? That seems to have very few components.
--
You received this message because you are subscribed to the Google Groups
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to qubes-users+uns
On Tuesday, September 27, 2016 at 4:27:01 PM UTC-4, neilh...@gmail.com wrote:
> How about Google Chromebooks which have a system to auto-restore the OS if it
> thinks it's been tampered with..?
>
> Or what about a read-only BIOS in the first place..?
>
> Is there any reason BIOS can't be read-on
On Tuesday, September 27, 2016 at 5:38:59 PM UTC-4, Unman wrote:
> On Tue, Sep 27, 2016 at 12:41:12PM -0700, raahe...@gmail.com wrote:
> > On Sunday, September 25, 2016 at 9:46:13 AM UTC-4, nishi...@gmail.com wrote:
> > > Hello,
> > >
> > > I am surprised that there is no way to disable ipv6 on De
On Tuesday, September 27, 2016 at 7:27:43 PM UTC-4, raah...@gmail.com wrote:
> On Tuesday, September 27, 2016 at 5:38:59 PM UTC-4, Unman wrote:
> > On Tue, Sep 27, 2016 at 12:41:12PM -0700, raahe...@gmail.com wrote:
> > > On Sunday, September 25, 2016 at 9:46:13 AM UTC-4, nishi...@gmail.com
> > >
On Tuesday, September 27, 2016 at 5:11:27 PM UTC-4, Jeremy Rand wrote:
> raahe...@gmail.com:
> > or just only allow https in the vm firewall settings.
>
> I assume you mean whitelisting TCP port 443? If so, be aware that while
> this will stop most non-HTTPS traffic, there is nothing that prevent
On Tuesday, September 27, 2016 at 5:11:27 PM UTC-4, Jeremy Rand wrote:
> raahe...@gmail.com:
> > or just only allow https in the vm firewall settings.
>
> I assume you mean whitelisting TCP port 443? If so, be aware that while
> this will stop most non-HTTPS traffic, there is nothing that prevent
On Wednesday, 28 September 2016 03:54:10 UTC+10, raah...@gmail.com wrote:
> Is your issue after a wake from suspend? Desktop freezes on me on one machine
> if it is left asleep for too long. I figure its related to bios or what vms
> were running when it went to sleep. I also find its less of
raahe...@gmail.com:
> On Tuesday, September 27, 2016 at 5:11:27 PM UTC-4, Jeremy Rand wrote:
>> raahe...@gmail.com:
>>> or just only allow https in the vm firewall settings.
>>
>> I assume you mean whitelisting TCP port 443? If so, be aware that while
>> this will stop most non-HTTPS traffic, ther
On Wednesday, 28 September 2016 03:54:10 UTC+10, raah...@gmail.com wrote:
> Is your issue after a wake from suspend? Desktop freezes on me on one machine
> if it is left asleep for too long. I figure its related to bios or what vms
> were running when it went to sleep. I also find its less of
On Wednesday, 28 September 2016 03:54:10 UTC+10, raah...@gmail.com wrote:
> Is your issue after a wake from suspend? Desktop freezes on me on one machine
> if it is left asleep for too long. I figure its related to bios or what vms
> were running when it went to sleep. I also find its less of
After 10 minutes of running, I have less than 50 Mb free RAM in Dom0.
--
You received this message because you are subscribed to the Google Groups
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to qubes-users+unsubscr...@googlegroups.com.
To
On Wednesday, 28 September 2016 11:28:45 UTC+10, Drew White wrote:
> On Wednesday, 28 September 2016 03:54:10 UTC+10, raah...@gmail.com wrote:
> > Is your issue after a wake from suspend? Desktop freezes on me on one
> > machine if it is left asleep for too long. I figure its related to bios or
> Yeah, Joanna is seriously epic.
Upon that, we can all agree.
Everything she designs or writes up, seems bang-on (and wonderfully
informative) in this increasingly security-threatened world we're living
in.
She's probably just a fictional character created by the NSA to mesmerize
and lure us Li
Hi folks,
I want to get the USB VMs to work, but I use keyboard and mouse via USB, not
PS/2, so it will not permit me to configure it.
I wish to attach specific USB Ports to Dom0, which is 1 of the bus's. And the
other USB bus's to the USBVM, but I can't find out what device to attach to
Dom0
> On Wednesday, 28 September 2016 03:54:10 UTC+10, raah...@gmail.com wrote:
>> Is your issue after a wake from suspend? Desktop freezes on me on one
>> machine if it is left asleep for too long. I figure its related to bios
>> or what vms were running when it went to sleep. I also find its less
On Wednesday, 28 September 2016 12:20:47 UTC+10, johny...@sigaint.org wrote:
> A bit late to the party (as they say) in this discussion, but why is it so
> important to suspend/restore in the first place?
A bit late to the party? What party is this? I started this thread.
I don't want to suspend/
> You can get a motherboard that has a removable bios chip that you can just
> snap in to replace, Then call the company and have them send you one or
> two to hold onto for emergency lol. There is also mobos with dualbios,
> most ly this is for bringing a bricked board back to life.
I actually
> I want to get the USB VMs to work, but I use keyboard and mouse via USB,
> not PS/2, so it will not permit me to configure it.
>
> I wish to attach specific USB Ports to Dom0, which is 1 of the bus's. And
> the other USB bus's to the USBVM, but I can't find out what device to
> attach to Dom0 to
> It may no longer be the case, but it used to be that most USB keyboards
> and mice had controllers that also automatically auto-detected and
> supported PS/2, with a simple passive passthrough dongle between the
> USB->PS/2 connection.
>
> http://www.ebay.com/itm/Cool-PS2-Female-to-USB-Male-Port-
On Wednesday, 28 September 2016 12:46:10 UTC+10, johny...@sigaint.org wrote:
> Pretty sure the answer is "no." You can assign a whole USB bus (which is
> typically a single PCI device) to a VM, but you can't split it up beyond
> that, other than the default of having dom0 relay specific devices t
> Hi JJ,
>
> My PC has 10 USB Bus's.
> My keyboard and mouse are on bus 10, which is PCI device .XX.X and I
> left that one on Dom0.
Are they 10 separate PCI devices, 10 separate USB buses?
I'd be very surprised if that were the case. But also very impressed, and
wanting such a motherboard f
On Wednesday, 28 September 2016 13:27:17 UTC+10, johny...@sigaint.org wrote:
> > Hi JJ,
> >
> > My PC has 10 USB Bus's.
> > My keyboard and mouse are on bus 10, which is PCI device .XX.X and I
> > left that one on Dom0.
>
> Are they 10 separate PCI devices, 10 separate USB buses?
>
> I'd be v
Hi JJ,
Did some more testing, you were right, I only have 3.
I have 2 bus's on the motherboard...
I plugged a USB drive into each set to find out which were which.
But that doesn't explain why it isn't working when I even just attach my USB3
card to the USBVM.
That alone should work, but it do
Hi Devs,
I would like to know from a dev what the requirements are for Qubes Windows
Tools (QWT).
All O/S reference are known to be x86_64.
Does QWT require any specific version of Windows 7?
Or will they work with all versions of Windows 7?
Why does QWT require TESTSIGNING to be turned on?
Is
66 matches
Mail list logo
