[qubes-users] Re: Bad USB with USB devices in VM

2017-01-11 Thread raahelps
I thought you meant infecting your pc out the box.  But ya your wireless card 
is not considered safe either.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/c0ee2f6d-6c71-45be-aa14-76c1261b1916%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Bad USB with USB devices in VM

2017-01-11 Thread raahelps
On Thursday, January 12, 2017 at 2:45:23 AM UTC-5, Steve wrote:
> On Thursday, January 12, 2017 at 11:37:06 AM UTC+4, raah...@gmail.com wrote:
>  
> > Qubes installs a usbvm called sys-usb by default.
> 
> If the USB controller is installed in this sys-usb and a bad usb memory stick 
> tried to write to the firmware, am I correct in assuming it is effectively 
> writing to virtual firmware and therefore the actual firmware stays intact ?

I don't believe so but hopefully your machines bios supports enabling 
iommu/vt-d, so at least the controller will be isolated from the other vms.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/dc1ec7e0-d9c0-4f0a-9966-9d1c6b78c7f3%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Qubes using Cloudflare - Why?

2017-01-11 Thread Andrew David Wong
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On 2017-01-11 23:24, taii...@gmx.com wrote:
> On 01/12/2017 12:33 AM, Andrew David Wong wrote:
> On 2017-01-11 12:34, Andrew David Wong wrote:
 On 01/11/17 11:04, taii...@gmx.com wrote:
> https://www.eff.org/deeplinks/2017/01/finally-revealed-cloudflare-has-been-fighting-nsls-years
>
 Three main reasons:

 1. We distrust the infrastructure anyway.
 2. It's low-overhead (in terms of the time and work required for
 administrative tasks).
 3. It's free (as in beer).

> On 2017-01-11 12:37, Alex wrote:
 In my understanding of the article, cloudflare is trying to challenge
 the secrecy around broad investigations (by challenging national
 security letters), not the other way around, so I can't see what you are
 lamenting, Taiidan... Would you care to explain?

> I mistakenly thought that this was a new thread posing the question in
> the subject line and providing a link to that article as a justification
> for the question. After viewing the whole thread on Google Groups, I
> realize that I've already answered the initial question. (I knew it
> seemed familiar!)
> 
> This is what happens when people reply to threads without quoting any
> part of the existing thread to provide context. :)
> 
> I second Alex's question. The article is clearly pro-Cloudflare from the
> very first sentence.
> 
> I thought I would share this because it proves that they're fighting a
> NSL and thus had one put in to action on them in the first place.
> 
> I realize that you enjoy the "free" services from them and that you lack
> the money to use anything else, but it is just something to think about
> regarding what happens when a handful of companies control almost the
> entire internet and the bigger picture - what happens if a change of
> management leads to them dropping the challenge? what companies simply
> comply and we never hear about it?
> 
> A theoretical condition of doing business in country X (say china) would
> be messing around with certain pages to provide bad advice and
> contaminated software to people, you don't have to get the elite
> security specialist types who take extraordinary precautions you simply
> have to get the average joe who doesn't know anyone in real life who can
> provide a real root of trust (even I don't)
> 

If you're worried about this, you can verify the contents of the whole
website by verifying PGP signatures on git commits and/or tags. In fact,
we've specifically set things up so that you can clone the whole git
repo, verify it, and run a local version of the website on your own
without having to trust Cloudflare (or any other part of the
infrastructure).

Our key fingerprints are scattered around so many places on the internet
that it shouldn't be difficult to verify them to your satisfaction
across multiple channels (different hardware, different connections, etc.).

> The cloudflare captcha is clearly designed to fingerprint the user
> (which works even with a generic DVM due to machine specs) or else it
> wouldn't need javascript, it is obvious that they have a market interest
> in tracking people even those who use VPN's.
> 
> I bet half the users on this mailing list have never considered the cost
> of "free" so my goal is to get people thinking about it.
> 

I agree that it's worth thinking about.

- -- 
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
-BEGIN PGP SIGNATURE-

iQIcBAEBCgAGBQJYdzawAAoJENtN07w5UDAwN8cQAIUvPT0th2aH/a5/EPCcpLV/
B+2ygY0qrTrh1tHII9TuN4d00h69DcUTohHElZi8+4uro5W2spdUBTV8gQt32d3F
2ADR8O/atwYcaJP/GB4MWsuNaTLPiPigvhhbo5sQ1bTrPD69U0B4cHT1X5Fn5nCA
EyE8JJunUvrC/I2RylV9lgMGW0nCARnD7hVIM3cx9uWQ8QnnQgvvohlKDmnUKgyD
cbZWj4CaIgFBkRZm6rONtrYttQBXXb8ubU4UnGlcbUAliXZ/5VIKv9uxLHG6wfZa
i66YqOhYe2i1CNXwusToUD3vggCEEQV1+2F4U2Y6GeQ16rPsH/Wb5ugN7TF3OuQ5
1XpQtmSJVNyZ8SozmtWMV9EIYNuaEc+EVd6KN8uwzTaoEx6ptiPBMzdfYN6S5zrj
ZnvKXVcdkw9IvtvzIL/+5TuSU5eKn3fkQFSDZgFDl+4DZZEUVDgopm6CygSgK3m4
zaCjdDhL81EHs4N2c4bHGaZrCwfUwsVjS6JIObw0A2Xn+dz+6l5yweluY2QTwFZd
WYKTxmKYON89XzK1kh65R9iasoPguTApvMa4cI/nWs4Zc0RibpQElwvWspbg/HUY
xMDrTcSMzUulSfU2RonWaOIekpE5VymNgy1dCS7A64W9b8Fo3ndAwIV8RTboE4M3
JfuQSWLZ5cFz0qb/K4qf
=0UAQ
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/bc9f6827-ba22-ae40-2a87-86882fbfd418%40qubes-os.org.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] How i can play video?

2017-01-11 Thread raahelps
it also might be the type of vids I'm watching haha

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/b33e27c9-2934-43f9-a620-7ec87140f7fa%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] How i can play video?

2017-01-11 Thread raahelps
On Thursday, January 12, 2017 at 2:50:49 AM UTC-5, raah...@gmail.com wrote:
> On Thursday, January 12, 2017 at 12:35:14 AM UTC-5, Andrew David Wong wrote:
> > -BEGIN PGP SIGNED MESSAGE-
> > Hash: SHA512
> > 
> > On 2017-01-11 20:21, raahe...@gmail.com wrote:
> > > On Wednesday, January 11, 2017 at 4:14:07 PM UTC-5, Andrew David Wong 
> > > wrote:
> > > On 01/11/17 07:14, Unman wrote:
> >  On Wed, Jan 11, 2017 at 09:07:17AM -0500, 'Repairing' via qubes-users 
> >  wrote:
> > > Still trying to figure out Qubes,
> > >
> > > When i open movies with "videos application", i get:
> > >
> > > AC-3 (ATSC A/52) decoder, MPEG-4 Video (advanced simple profile) 
> > > decoder are required to play the file, but are not installed.
> > >
> > >
> > > I also tried:
> > >
> > > Banshee
> > > Parole
> > > Snappy
> > >
> > > But there's just black background with them.
> > >
> > > Your time is much appreciated.
> > >
> > 
> >  This  comes up so often it should be a FAQ.
> > > 
> > > Added: https://www.qubes-os.org/doc/user-faq/#how-do-i-play-video-files
> > > 
> > > 
> > > ah nice i was looking everywhere for the easy way to enable rpmfusion 
> > > without having to download it. I remember you had mentioned it before on 
> > > here but couldn't find the thread. 
> > > 
> > > You might want to add to set the output mode in vlc to x11, otherwise it 
> > > use too much cpu%.
> > > 
> > 
> > Are you sure that's required? I've never had a problem with it on the 
> > default settings.
> > 
> > > Hey Andrew I seen you on an episode of the new screensavers,  nice job 
> > > promoting Qubes!
> > > 
> > 
> > Thanks, raahelps!
> > 
> > - -- 
> > Andrew David Wong (Axon)
> > Community Manager, Qubes OS
> > https://www.qubes-os.org
> > -BEGIN PGP SIGNATURE-
> > 
> > iQIcBAEBCgAGBQJYdxWFAAoJENtN07w5UDAwJHEP/3RIfke/ML8/gqplrAdSadtt
> > B0AyHT74FDQflOM0Uk36AqSbqY2GPrWbI/gLemLjfKGPUiS6ys9tl1XXrsEWM1mQ
> > JVUIyJGklJArlbFscmy/RgN7i2UZ30SM0zEnKgoyoyPC7A6To/762vg6hfPTyv35
> > hET/Hy7G3FR8V5c89BzUjDUecdJogWp3gY2JiCFMozOQjd+xumP8YaZQmOCgcZIc
> > xH5Zxqtw62CUp1YzfyEI7Qhx0Z4ccZ8YPdAbwXa7puGYGwGpOvrkfEZQ0InTgd7c
> > hDsTuCrPAQLO2JHKyBF4armVIOH0+L+LGSl3mWCLd7LxUyLkrJpextvz1te9BlIG
> > Wi6TwRSDBS9wF+NEX5btTqNWvbHLWgnL6ALc2N/uxX1fyMvL5RhPZ/EpTU1QzLKP
> > BdJGuebnNM7FfLagvV7JsKzd7HNxSzwiIeyAwydSCM3n2p2ktdDRbCw3VkRafCiY
> > h/cOlBE1CsQmkPFwVmVFMwpBgz9FYx8tFRgrtwwxpTle9kh/WhpDFn5DxiGcGDsS
> > 1PKOPX8FwwiOU8HBgm5OlrkawHI5yDxn+y8yz2lOlvklC7uDQTWluPCUgktIb+Ym
> > XW7Evmb2vTgg+3cJM6IJkFW9wKwgFbsdhadgJE5KShv27CuaWpMmS8O9eD865wOT
> > lYQmvkO+bWcfWdvcmeV/
> > =R5f7
> > -END PGP SIGNATURE-
> 
> ya my cpu% goes way down. somethign like 60% to in the 20s. Its a Qubes thing 
> but setting that gives me the cpu% I would get on baremetal.  I get worried 
> about heat sometimes.  I thought others have had slowdown issues too on the 
> mailing list too but maybe its just me. I do have an older amd cpu on this 
> machine.  Not sure if I actually tested the diff on the i5.

Videocard might make a diff too.  I have nvidia on this one.  intel on the 
other.  I'll test it tomorrow if I can.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/5b5a92e3-6c53-4065-8631-589d01844c0b%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] How i can play video?

2017-01-11 Thread raahelps
On Thursday, January 12, 2017 at 12:35:14 AM UTC-5, Andrew David Wong wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA512
> 
> On 2017-01-11 20:21, raahe...@gmail.com wrote:
> > On Wednesday, January 11, 2017 at 4:14:07 PM UTC-5, Andrew David Wong wrote:
> > On 01/11/17 07:14, Unman wrote:
>  On Wed, Jan 11, 2017 at 09:07:17AM -0500, 'Repairing' via qubes-users 
>  wrote:
> > Still trying to figure out Qubes,
> >
> > When i open movies with "videos application", i get:
> >
> > AC-3 (ATSC A/52) decoder, MPEG-4 Video (advanced simple profile) 
> > decoder are required to play the file, but are not installed.
> >
> >
> > I also tried:
> >
> > Banshee
> > Parole
> > Snappy
> >
> > But there's just black background with them.
> >
> > Your time is much appreciated.
> >
> 
>  This  comes up so often it should be a FAQ.
> > 
> > Added: https://www.qubes-os.org/doc/user-faq/#how-do-i-play-video-files
> > 
> > 
> > ah nice i was looking everywhere for the easy way to enable rpmfusion 
> > without having to download it. I remember you had mentioned it before on 
> > here but couldn't find the thread. 
> > 
> > You might want to add to set the output mode in vlc to x11, otherwise it 
> > use too much cpu%.
> > 
> 
> Are you sure that's required? I've never had a problem with it on the default 
> settings.
> 
> > Hey Andrew I seen you on an episode of the new screensavers,  nice job 
> > promoting Qubes!
> > 
> 
> Thanks, raahelps!
> 
> - -- 
> Andrew David Wong (Axon)
> Community Manager, Qubes OS
> https://www.qubes-os.org
> -BEGIN PGP SIGNATURE-
> 
> iQIcBAEBCgAGBQJYdxWFAAoJENtN07w5UDAwJHEP/3RIfke/ML8/gqplrAdSadtt
> B0AyHT74FDQflOM0Uk36AqSbqY2GPrWbI/gLemLjfKGPUiS6ys9tl1XXrsEWM1mQ
> JVUIyJGklJArlbFscmy/RgN7i2UZ30SM0zEnKgoyoyPC7A6To/762vg6hfPTyv35
> hET/Hy7G3FR8V5c89BzUjDUecdJogWp3gY2JiCFMozOQjd+xumP8YaZQmOCgcZIc
> xH5Zxqtw62CUp1YzfyEI7Qhx0Z4ccZ8YPdAbwXa7puGYGwGpOvrkfEZQ0InTgd7c
> hDsTuCrPAQLO2JHKyBF4armVIOH0+L+LGSl3mWCLd7LxUyLkrJpextvz1te9BlIG
> Wi6TwRSDBS9wF+NEX5btTqNWvbHLWgnL6ALc2N/uxX1fyMvL5RhPZ/EpTU1QzLKP
> BdJGuebnNM7FfLagvV7JsKzd7HNxSzwiIeyAwydSCM3n2p2ktdDRbCw3VkRafCiY
> h/cOlBE1CsQmkPFwVmVFMwpBgz9FYx8tFRgrtwwxpTle9kh/WhpDFn5DxiGcGDsS
> 1PKOPX8FwwiOU8HBgm5OlrkawHI5yDxn+y8yz2lOlvklC7uDQTWluPCUgktIb+Ym
> XW7Evmb2vTgg+3cJM6IJkFW9wKwgFbsdhadgJE5KShv27CuaWpMmS8O9eD865wOT
> lYQmvkO+bWcfWdvcmeV/
> =R5f7
> -END PGP SIGNATURE-

ya my cpu% goes way down. somethign like 60% to in the 20s. Its a Qubes thing 
but setting that gives me the cpu% I would get on baremetal.  I get worried 
about heat sometimes.  I thought others have had slowdown issues too on the 
mailing list too but maybe its just me. I do have an older amd cpu on this 
machine.  Not sure if I actually tested the diff on the i5.   

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/ca2cc095-5038-4449-85a5-4b2d25ba4e12%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Bad USB with USB devices in VM

2017-01-11 Thread Steve
On Thursday, January 12, 2017 at 11:37:06 AM UTC+4, raah...@gmail.com wrote:
 
> Qubes installs a usbvm called sys-usb by default.

If the USB controller is installed in this sys-usb and a bad usb memory stick 
tried to write to the firmware, am I correct in assuming it is effectively 
writing to virtual firmware and therefore the actual firmware stays intact ? 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/c98c5bb0-e642-46fe-9341-a7ac13f734ae%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Bad USB with USB devices in VM

2017-01-11 Thread raahelps


use rawrite32.exe if your burning it from windows.  
https://www.netbsd.org/~martin/rawrite32/download.html

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/f21e5829-0cf8-4984-b6a3-660392f3fe69%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Setup for Graphic Design work / Failing to configure a PCI pasthrough on Archlinux

2017-01-11 Thread taii...@gmx.com

On 01/11/2017 09:06 PM, joseph.yeng...@gmail.com wrote:


Hello.

Firstly, thank you for taking the time to read this, I'll be brief.

I'm a graphic designer, and a paranoid. With Qubes OS, I aspire to peform both 
of these roles at the same time, even if that requires some adaptation. I'm 
familiar with using Windows,the Adobe Creative Suite (Photoshop and 
Illustrator, occasionally InDesign), and working with a 13' Cintiq tablet 
(http://www.wacom.com/en-us/products/pen-displays/cintiq-13-hd). The laptop 
I've installed Qubes on is an Dell Inspiron 15 5547 
(http://www.pcworld.idg.com.au/review/dell/inspiron_15_5547/545787/specs/ and 
https://wiki.archlinux.org/index.php/Dell_Inspiron_5547).

At first, I've tried installing running a windows 7 HVM, but gave up on the 
idea after discovering it would not work, as of now, with my Cintiq due to 
limitations on assigning it a USB controller 
(https://groups.google.com/forum/#!searchin/qubes-users/windows$20usb%7Csort:relevance/qubes-users/PtUAMzZGUHU/efAzwol9AwAJ).
 Then, I've installed Archlinux, intending on using Wine to run the 
applications. To be honest, I don't know if this is the most appropriate 
solution. I'm figuring this thing out as I go along.

As of now, I've created an AppVM based upon the Archlinux template, and tried 
to assign it an USB controller (00:14.0 USB controller: Intel Corporation 8 
Series USB xHCI HC (rev 04), and a GPU (03:00.0 Display controller: Advanced 
Micro Devices, Inc. [AMD/ATI] Topaz XT [Radeon R7 M260/M265]). Eventually I'll 
have to figure out where is the HDMI exit in the lspci output list but, as of 
now, when assign those two pieces of hardware to the AppVM, it fails to boot. 
Even worse, from that point on, any other VM will also fail to boot until I 
restart the computer.

So, I would like to ask of you: is this solution most appropriate for its 
intended use? If so, how does one solve its technical issues? If not, what are 
the alternatives?

Again, I would like to thank you for your help.


*UPDATED NEW* forgot the questions at the bottom and accidental top post
Have you ran the HCL tools? does your chipset support IOMMU? (inspiron 
is a garbage consumer level device so probably not)


Graphics device assignment is an experimental feature, it doesn't work 
all of the time and you can only (easily) assign a secondary graphics 
device that isn't in use. I assume you tried to assign your primary 
video adapter...

It will only work with HVM.

If you want more than one video device on a laptop you can try an 
external pci-e device, they connect via various interfaces including 
expresscard.


Assigning a USB controller (all of it) doesn't involve emulation, any 
usb device will work as long as the guest supports it just like on bare 
metal.


I play the latest games in a virtual machine with an attached graphics 
card on QEMU, I will be happy to help if you have any further questions


It is what you should do if you want this and it is more secure than 
bare metal or emulation if you follow the above.


Using it with qubes is difficult but some users have reported success, 
maybe better to use another distro with xen or qemu if you want this.


--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/bc8adaf0-513a-fcaf-df75-5265fb047d74%40gmx.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Bad USB with USB devices in VM

2017-01-11 Thread raahelps
On Thursday, January 12, 2017 at 2:26:02 AM UTC-5, Steve wrote:
> On Thursday, January 12, 2017 at 10:09:56 AM UTC+4, Steve wrote:
> > If a memory stick infected with Bad USB is inserted into a laptop running 
> > Qubes with the USB devices running in a VM, does the laptop USB firmware 
> > get rewritten by the Bad USB ?
> 
> What can I do on a fresh installation on a brand new laptop to ensure that 
> once installed with Qubes the laptop firmware cannot be over written written 
> (assuming I am using an optical drive for installation,) thx

Qubes installs a usbvm called sys-usb by default.

so where you get the iso I guess is the real question.  And what usb stick you 
use to write it on.  Maybe someone has some comments on a good usb brand to 
buy.  I buy microcenter.

Where you get the iso is another story.  so use your brand new computer to 
download it. hopefully its coming with an os pre-installed?   maybe harden 
windows first follow these instructions before you boot the os.   
www.hardenwindows10forsecurity.com,  (read the instructions on an older 
computer not your new one)  make sure to follow the qubes install instructions 
how to verify the key signatures.  and then hope for the best.  use good 
security practices.  keep stuff as compartmentalized as your mind can handle.

I been in my amazon videos qube mostly since the holidays.  ANd so all i do in 
that vm is watch videos nothing else.  I use about a dozen diff vms for 
different tasks I do on the pc.  I log into this yellow colored qube, the 
default personal,  to log into my webmail, google, stuff where i'm not 
devastated if the password gets stolen.  more sensitive stuff in another. 

Actually its not true about my amazon qube.  I'm actually always in a 
disposable vm the most out of anything.  I use it for all random tasks that 
don't need credentials.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/63af3ddb-ee07-459d-b463-0c502da4b75c%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] bluetooth support in dom0

2017-01-11 Thread John Smith
On Thursday, January 12, 2017 at 12:26:21 AM UTC-7, raah...@gmail.com wrote:
> On Thursday, January 12, 2017 at 2:23:16 AM UTC-5, John Smith wrote:
> > On Wednesday, March 12, 2014 at 4:40:16 PM UTC-6, danf...@gmail.com wrote:
> > > > 
> > > > > I don't know much about the security side of things, but I'm happy to
> > > > 
> > > > > blindly ignore any "in my local neighbourhood" kind of attacks if
> > > > 
> > > > > that was the only issue.
> > > > 
> > > > > 
> > > > 
> > > > 
> > > > 
> > > > Why not use Windows then? Or Mac? :)
> > > 
> > > Because they don't offer the other nice features such as the app domains 
> > > and disposable VMs. Which I assume would still help against remote 
> > > threats such as web browser exploits.
> > > 
> > > > 
> > > > > Or should I be avoiding Qubes if I can't figure this stuff out
> > > > 
> > > > > myself? ;)
> > > > 
> > > > > 
> > > > 
> > > > > I'm just an amateur Linux user mildly interested in increased
> > > > 
> > > > > security/privacy.
> > > > 
> > > > > 
> > > > 
> > > > > Side musing: Have the developers considered allowing *optional*
> > > > 
> > > > > support for things that have security issues, in the spirit of
> > > > 
> > > > > compromise...?
> > > > 
> > > > 
> > > > 
> > > > Qubes OS is an open platform, you can configure it however you like,
> > > > 
> > > > disabling potentially all security feature, if you really want. The user
> > > > 
> > > > is the ultimate boss.
> > > > 
> > > 
> > > I should rephrase that as "easy to use", even GUI based, configurability. 
> > > Perhaps you aren't targeting such "novice" users.
> > > 
> > > 
> > > > 
> > > > > For instance, I absolutely do choose convenience and
> > > > 
> > > > > even necessity over security (to the tune of bluetooth, full graphics
> > > > 
> > > > > card support for game dev work), yet wouldn't there still be
> > > > 
> > > > > something to be gained by using Qubes even with those security holes?
> > > > 
> > > > > When the choice is Qubes with these holes vs just any regular Linux
> > > > 
> > > > > distro.
> > > > 
> > > > > 
> > > > 
> > > > 
> > > > 
> > > > Modern Windows and OSX offer a "reasonable compromise" of security, I 
> > > > heard.
> > > 
> > > Haha!
> > 
> > Any update regarding this?
> 
> hahaha

You manage to figure it out lol?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/6adb884e-31c6-48d6-9380-adc26a20b706%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Setup for Graphic Design work / Failing to configure a PCI pasthrough on Archlinux

2017-01-11 Thread taii...@gmx.com
Have you ran the HCL tools? does your chipset support IOMMU? (inspiron 
is a garbage consumer level device so probably not)


Graphics device assignment is an experimental feature, it doesn't work 
all of the time and you can only (easily) assign a secondary graphics 
device that isn't in use. I assume you tried to assign your primary 
video adapter...

It will only work with HVM.

If you want more than one video device on a laptop you can try an 
external pci-e device, they connect via various interfaces including 
expresscard.


Assigning a USB controller (all of it) doesn't involve emulation, any 
usb device will work as long as the guest supports it just like on bare 
metal.


I play the latest games in a virtual machine with an attached graphics 
card on QEMU, I will be happy to help if you have any further questions.

On 01/11/2017 09:06 PM, joseph.yeng...@gmail.com wrote:

Hello.

Firstly, thank you for taking the time to read this, I'll be brief.

I'm a graphic designer, and a paranoid. With Qubes OS, I aspire to peform both 
of these roles at the same time, even if that requires some adaptation. I'm 
familiar with using Windows,the Adobe Creative Suite (Photoshop and 
Illustrator, occasionally InDesign), and working with a 13' Cintiq tablet 
(http://www.wacom.com/en-us/products/pen-displays/cintiq-13-hd). The laptop 
I've installed Qubes on is an Dell Inspiron 15 5547 
(http://www.pcworld.idg.com.au/review/dell/inspiron_15_5547/545787/specs/ and 
https://wiki.archlinux.org/index.php/Dell_Inspiron_5547).

At first, I've tried installing running a windows 7 HVM, but gave up on the 
idea after discovering it would not work, as of now, with my Cintiq due to 
limitations on assigning it a USB controller 
(https://groups.google.com/forum/#!searchin/qubes-users/windows$20usb%7Csort:relevance/qubes-users/PtUAMzZGUHU/efAzwol9AwAJ).
 Then, I've installed Archlinux, intending on using Wine to run the 
applications. To be honest, I don't know if this is the most appropriate 
solution. I'm figuring this thing out as I go along.

As of now, I've created an AppVM based upon the Archlinux template, and tried 
to assign it an USB controller (00:14.0 USB controller: Intel Corporation 8 
Series USB xHCI HC (rev 04), and a GPU (03:00.0 Display controller: Advanced 
Micro Devices, Inc. [AMD/ATI] Topaz XT [Radeon R7 M260/M265]). Eventually I'll 
have to figure out where is the HDMI exit in the lspci output list but, as of 
now, when assign those two pieces of hardware to the AppVM, it fails to boot. 
Even worse, from that point on, any other VM will also fail to boot until I 
restart the computer.

So, I would like to ask of you: is this solution most appropriate for its 
intended use? If so, how does one solve its technical issues? If not, what are 
the alternatives?

Again, I would like to thank you for your help.



--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/72a9ea17-04a1-7739-47da-a614b65f5e34%40gmx.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] How to get bluetooth keyboard working in dom0?

2017-01-11 Thread John Smith
Anyone know how to get a bluetooth keyboard working in dom0 (so I can use it 
with all AppVMs). I'm aware of the security risks but I have an ergonomic split 
keyboard which I would really like to use with Qubes. The keyboard I'm trying 
to connect is called the Kinesis Freestyle2 Blue. It uses a non-proprietary 
bluetooth dongle. Regular logitech proprietary bluetooth keyboards seem to work 
out of the box with their own dongles but I couldn't get Qubes to detect my 
non-proprietary usb bluetooth dongle. Can someone please provide me the step by 
step info to get this working? I'm running a fresh default install of the 
latest version of Qubes 3.2. Thanks in advance.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/627a04ae-e1ef-47c3-bfed-32670dca5009%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] bluetooth support in dom0

2017-01-11 Thread raahelps
On Thursday, January 12, 2017 at 2:23:16 AM UTC-5, John Smith wrote:
> On Wednesday, March 12, 2014 at 4:40:16 PM UTC-6, danf...@gmail.com wrote:
> > > 
> > > > I don't know much about the security side of things, but I'm happy to
> > > 
> > > > blindly ignore any "in my local neighbourhood" kind of attacks if
> > > 
> > > > that was the only issue.
> > > 
> > > > 
> > > 
> > > 
> > > 
> > > Why not use Windows then? Or Mac? :)
> > 
> > Because they don't offer the other nice features such as the app domains 
> > and disposable VMs. Which I assume would still help against remote threats 
> > such as web browser exploits.
> > 
> > > 
> > > > Or should I be avoiding Qubes if I can't figure this stuff out
> > > 
> > > > myself? ;)
> > > 
> > > > 
> > > 
> > > > I'm just an amateur Linux user mildly interested in increased
> > > 
> > > > security/privacy.
> > > 
> > > > 
> > > 
> > > > Side musing: Have the developers considered allowing *optional*
> > > 
> > > > support for things that have security issues, in the spirit of
> > > 
> > > > compromise...?
> > > 
> > > 
> > > 
> > > Qubes OS is an open platform, you can configure it however you like,
> > > 
> > > disabling potentially all security feature, if you really want. The user
> > > 
> > > is the ultimate boss.
> > > 
> > 
> > I should rephrase that as "easy to use", even GUI based, configurability. 
> > Perhaps you aren't targeting such "novice" users.
> > 
> > 
> > > 
> > > > For instance, I absolutely do choose convenience and
> > > 
> > > > even necessity over security (to the tune of bluetooth, full graphics
> > > 
> > > > card support for game dev work), yet wouldn't there still be
> > > 
> > > > something to be gained by using Qubes even with those security holes?
> > > 
> > > > When the choice is Qubes with these holes vs just any regular Linux
> > > 
> > > > distro.
> > > 
> > > > 
> > > 
> > > 
> > > 
> > > Modern Windows and OSX offer a "reasonable compromise" of security, I 
> > > heard.
> > 
> > Haha!
> 
> Any update regarding this?

hahaha

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20acfdfc-4dbf-4ca9-83c1-7d27d00bd628%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: VM chaining visualisation tool

2017-01-11 Thread Steve
On Thursday, January 12, 2017 at 10:11:48 AM UTC+4, Steve wrote:
> Is there a way I can get a real time visualisation of the VM chaining , for 
> example a Domain chaining through a firewall through a VPN and sys Network ?

Is there a way in Terminal to get a textual description of the linking ? thx

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/596ce03a-d79c-4e07-a4a0-a32a1e4cba06%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Bad USB with USB devices in VM

2017-01-11 Thread Steve
On Thursday, January 12, 2017 at 10:09:56 AM UTC+4, Steve wrote:
> If a memory stick infected with Bad USB is inserted into a laptop running 
> Qubes with the USB devices running in a VM, does the laptop USB firmware get 
> rewritten by the Bad USB ?

What can I do on a fresh installation on a brand new laptop to ensure that once 
installed with Qubes the laptop firmware cannot be over written written 
(assuming I am using an optical drive for installation,) thx

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/387c3cbd-4e88-4261-b022-ac87f2864457%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Qubes using Cloudflare - Why?

2017-01-11 Thread taii...@gmx.com

On 01/12/2017 12:33 AM, Andrew David Wong wrote:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On 2017-01-11 12:34, Andrew David Wong wrote:

On 01/11/17 11:04, taii...@gmx.com wrote:

https://www.eff.org/deeplinks/2017/01/finally-revealed-cloudflare-has-been-fighting-nsls-years

Three main reasons:

1. We distrust the infrastructure anyway.
2. It's low-overhead (in terms of the time and work required for
administrative tasks).
3. It's free (as in beer).


On 2017-01-11 12:37, Alex wrote:

In my understanding of the article, cloudflare is trying to challenge
the secrecy around broad investigations (by challenging national
security letters), not the other way around, so I can't see what you are
lamenting, Taiidan... Would you care to explain?


I mistakenly thought that this was a new thread posing the question in
the subject line and providing a link to that article as a justification
for the question. After viewing the whole thread on Google Groups, I
realize that I've already answered the initial question. (I knew it
seemed familiar!)

This is what happens when people reply to threads without quoting any
part of the existing thread to provide context. :)

I second Alex's question. The article is clearly pro-Cloudflare from the
very first sentence.

- -- 
Andrew David Wong (Axon)

Community Manager, Qubes OS
https://www.qubes-os.org
-BEGIN PGP SIGNATURE-
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=0uH4
-END PGP SIGNATURE-
I thought I would share this because it proves that they're fighting a 
NSL and thus had one put in to action on them in the first place.


I realize that you enjoy the "free" services from them and that you lack 
the money to use anything else, but it is just something to think about 
regarding what happens when a handful of companies control almost the 
entire internet and the bigger picture - what happens if a change of 
management leads to them dropping the challenge? what companies simply 
comply and we never hear about it?


A theoretical condition of doing business in country X (say china) would 
be messing around with certain pages to provide bad advice and 
contaminated software to people, you don't have to get the elite 
security specialist types who take extraordinary precautions you simply 
have to get the average joe who doesn't know anyone in real life who can 
provide a real root of trust (even I don't)


The cloudflare captcha is clearly designed to fingerprint the user 
(which works even with a generic DVM due to machine specs) or else it 
wouldn't need javascript, it is obvious that they have a market interest 
in tracking people even those who use VPN's.


I bet half the users on this mailing list have never considered the cost 
of "free" so my goal is to get people thinking about it.


--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/f9568895-69ef-f880-2dee-b47067fe6541%40gmx.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] bluetooth support in dom0

2017-01-11 Thread crypt1c . surf3r
On Wednesday, March 12, 2014 at 4:40:16 PM UTC-6, danf...@gmail.com wrote:
> > 
> > > I don't know much about the security side of things, but I'm happy to
> > 
> > > blindly ignore any "in my local neighbourhood" kind of attacks if
> > 
> > > that was the only issue.
> > 
> > > 
> > 
> > 
> > 
> > Why not use Windows then? Or Mac? :)
> 
> Because they don't offer the other nice features such as the app domains and 
> disposable VMs. Which I assume would still help against remote threats such 
> as web browser exploits.
> 
> > 
> > > Or should I be avoiding Qubes if I can't figure this stuff out
> > 
> > > myself? ;)
> > 
> > > 
> > 
> > > I'm just an amateur Linux user mildly interested in increased
> > 
> > > security/privacy.
> > 
> > > 
> > 
> > > Side musing: Have the developers considered allowing *optional*
> > 
> > > support for things that have security issues, in the spirit of
> > 
> > > compromise...?
> > 
> > 
> > 
> > Qubes OS is an open platform, you can configure it however you like,
> > 
> > disabling potentially all security feature, if you really want. The user
> > 
> > is the ultimate boss.
> > 
> 
> I should rephrase that as "easy to use", even GUI based, configurability. 
> Perhaps you aren't targeting such "novice" users.
> 
> 
> > 
> > > For instance, I absolutely do choose convenience and
> > 
> > > even necessity over security (to the tune of bluetooth, full graphics
> > 
> > > card support for game dev work), yet wouldn't there still be
> > 
> > > something to be gained by using Qubes even with those security holes?
> > 
> > > When the choice is Qubes with these holes vs just any regular Linux
> > 
> > > distro.
> > 
> > > 
> > 
> > 
> > 
> > Modern Windows and OSX offer a "reasonable compromise" of security, I heard.
> 
> Haha!

Any update regarding this?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/4ddfbecd-6d72-449c-b27a-c4cacaa6a1cf%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] VM chaining visualisation tool

2017-01-11 Thread Andrew David Wong
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On 2017-01-11 22:11, Steve wrote:
> Is there a way I can get a real time visualisation of the VM
> chaining , for example a Domain chaining through a firewall through
> a VPN and sys Network ?
> 

Not that I'm aware of. This feature has been discussed and requested
before, and I seem to recall someone saying they might try making one,
but I don't know whether anything ever came of it.

- -- 
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
-BEGIN PGP SIGNATURE-

iQIcBAEBCgAGBQJYdy1qAAoJENtN07w5UDAwkYcP/RcA2WqVZuWNnJi8BoDsq2CD
ZHs6m5bVnHfBXdDsfhwyCKZDDXuT+Ic/JLpiwQo9hjsQt1obfxkOAVbaA5/RdOWN
phMtV2Re5FpsqCMIF8txuqiWAmUMEom2YyravPfWPebNkV5ZO9Ew0CMG7UNkAfl0
JXCQgYvXPpqPLv8xdQYAfUJBoI5IVNsKgm621O8WQkD12HLVrhrNSNwcWmO2bqgv
JIvXNsgLh4X8jHi0xqrHolPOsDOE9KfB8koFp16boQ8BQs8ZNvbYV1qcfaCISR9a
kR37KHrNqQgdEeNagOHAEmGqc5bsP29NIfHvyRLqOSQLDWadgcsZwP8iTlk42IFD
i5G/AD4KyOv2K0V+moAlWZfBXKvNv+LrTU5R9byadc8X54uEzqrqRR33SJcQka8I
m6a6SWfBvZS7Ec9q+32KFRmVRXKMJOpK+Xb1fG3vtmwY/FF54ZPnpQSdVVdkKEms
5EWzyg3xskqTUqcoVuXxvfwu/CWrW5z2cjIJ4PZ7i7m8y+ylzP4iWQtd8KaNkIAv
yBkWGKUlkF7iPiyzQbVUrfhQbXlaHx1bkNwIq6uYr9ymPqk4pMXjfrKQ9tBabjly
bYPTdzzqJrbBJskXD96Oi64Ny7Q8E+SQUVK5ODvxwYubsqSJzoD7obssBBH/24ca
YTofZrG8ljY+dBaFD0eY
=u1Ix
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/db4e2ca5-7341-72bf-7da4-9eb5017d968e%40qubes-os.org.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Bad USB with USB devices in VM

2017-01-11 Thread Andrew David Wong
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On 2017-01-11 22:09, Steve wrote:
> If a memory stick infected with Bad USB is inserted into a laptop
> running Qubes with the USB devices running in a VM, does the laptop
> USB firmware get rewritten by the Bad USB ?
> 

Possibly. This is why we blacklist USB controllers from dom0 if a USB
qube is created by the installer (so that they're not accidentally
exposed to dom0 afterward).

- -- 
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
-BEGIN PGP SIGNATURE-
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=EWwb
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/cc1933a5-27ea-01af-7801-16ccff5de0fc%40qubes-os.org.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] VM chaining visualisation tool

2017-01-11 Thread Steve
Is there a way I can get a real time visualisation of the VM chaining , for 
example a Domain chaining through a firewall through a VPN and sys Network ?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/f12f7914-b4cf-430a-a9f6-b6abe3894d65%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Bad USB with USB devices in VM

2017-01-11 Thread Steve
If a memory stick infected with Bad USB is inserted into a laptop running Qubes 
with the USB devices running in a VM, does the laptop USB firmware get 
rewritten by the Bad USB ?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/02c062e2-9d51-4dbd-a6ca-f9d3969d05f0%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: Bad GPG sig on R3.2 release

2017-01-11 Thread Andrew David Wong
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On 2017-01-11 20:14, raahe...@gmail.com wrote:
> worked for me 
> 
> gpg -v --verify Qubes-R3.2-x86_64.iso.DIGESTS 
> gpg: armor header: Hash: SHA256
> gpg: armor header: Version: GnuPG v2
> gpg: original file name=''
> gpg: Signature made Tue 20 Sep 2016 01:37:03 PM EDT using RSA key ID 03FA5082
> gpg: using PGP trust model
> gpg: Good signature from "Qubes OS Release 3 Signing Key"
> gpg: textmode signature, digest algorithm SHA256
> 

Same here:

$ gpg2 -v --verify Qubes-R3.2-x86_64.iso.DIGESTS 
gpg: armor header: Hash: SHA256
gpg: armor header: Version: GnuPG v2
gpg: original file name=''
gpg: Signature made 2016-09-20T10:37:03 PDT using RSA key ID CB11CA1D03FA5082
gpg: using pgp trust model
gpg: checking the trustdb
gpg: 2 keys processed (3 validity counts cleared)
gpg: marginals needed: 3  completes needed: 1  trust model: pgp
gpg: Note: signature key 96ED3C3BA19C3DEE expired 2016-12-02T01:58:03 PST
gpg: Note: signature key 99AB06246EEBF5A8 expired 2016-07-02T16:01:41 PDT
gpg: Note: signature key 8B93CC3E77A1C5EA expired 2017-01-11T12:58:24 PST
gpg: Note: signature key 94A6A0746A70BAB8 expired 2017-01-11T12:58:24 PST
gpg: Note: signature key EE570349A603BCB6 expired 2014-03-05T16:00:28 PST
gpg: Note: signature key 00B2859B10210515 expired 2015-08-22T03:32:16 PDT
gpg: depth: 0  valid:   2  signed:  10  trust: 0-, 0q, 0n, 0m, 0f, 2u
gpg: Note: signature key 96ED3C3BA19C3DEE expired 2016-12-02T01:58:03 PST
gpg: Note: signature key 00B2859B10210515 expired 2015-08-22T03:32:16 PDT
gpg: depth: 1  valid:  10  signed:   0  trust: 10-, 0q, 0n, 0m, 0f, 0u
gpg: Good signature from "Qubes OS Release 3 Signing Key" [full]
gpg: textmode signature, digest algorithm SHA256, key algorithm rsa4096

- -- 
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
-BEGIN PGP SIGNATURE-

iQIcBAEBCgAGBQJYdxblAAoJENtN07w5UDAwhegQAI5Ltdk0fQiDlB1DPxCHcX9C
y3A4CGxjYAGJnyFkFPwSTDkSxdkr3NZTn3LBdMzSy9KZSPjRMvoLSZ1WKaUZgr5U
Ql6QaTU5x+C3rikIADgFNUqA8oOxb7/BoN0vXmRarIPQqjNArxNil72e/jXw80hB
9Oe1jjlWcL+Rj/O6QhM/S/yyrNjWgYvMdvsgDwlKQ//2Aq5TFmXqigONqKDFWZX5
i/9P6KCj6fyhWEzcZzWfNhvA0RzRXGUvuzG3Zu4EvxA+ury+cmiSBAjPFn0VzBeU
k8ZZAv1UKfAJS+e/FMhT8MSMavg5QgjHgoJ4CWVUX6n5t95zCXyH7dkSn8dWtXTX
kLKNeMC1KM8JOsQShpUpnhtURGik2KJnr8Wf72uv/R/ivxLd6iYLMcGUG5wPd9jI
9K4jwmAwzoh0xRKn1T9eGXlPqpNSBM4Gq3Xr5GMHaTlE4xG1l7LszPNgu9/YmouP
Bw98V4zlDUweNKgME2qJ8oOzdI+7t9jky2uGGc/KCebjn8hkeoWhvqFzqXXkEDgi
mkl25SKu9FisikoG+K0odfVyOK76Z/AXcQouYKdIpNd5COp+uWAqcuZYr73arN8t
Lg9aY9Kg20jFd7RvmB4RjfFEDxxR5aiH2gV8DN7QkpxyTV1p6VpBFEnThYEdb6Qk
PWanayi9GlE5upUV/1sK
=YuRt
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/e358686e-f992-032b-b494-5ffa41c88609%40qubes-os.org.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] How i can play video?

2017-01-11 Thread Andrew David Wong
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On 2017-01-11 20:21, raahe...@gmail.com wrote:
> On Wednesday, January 11, 2017 at 4:14:07 PM UTC-5, Andrew David Wong wrote:
> On 01/11/17 07:14, Unman wrote:
 On Wed, Jan 11, 2017 at 09:07:17AM -0500, 'Repairing' via qubes-users 
 wrote:
> Still trying to figure out Qubes,
>
> When i open movies with "videos application", i get:
>
> AC-3 (ATSC A/52) decoder, MPEG-4 Video (advanced simple profile) decoder 
> are required to play the file, but are not installed.
>
>
> I also tried:
>
> Banshee
> Parole
> Snappy
>
> But there's just black background with them.
>
> Your time is much appreciated.
>

 This  comes up so often it should be a FAQ.
> 
> Added: https://www.qubes-os.org/doc/user-faq/#how-do-i-play-video-files
> 
> 
> ah nice i was looking everywhere for the easy way to enable rpmfusion without 
> having to download it. I remember you had mentioned it before on here but 
> couldn't find the thread. 
> 
> You might want to add to set the output mode in vlc to x11, otherwise it use 
> too much cpu%.
> 

Are you sure that's required? I've never had a problem with it on the default 
settings.

> Hey Andrew I seen you on an episode of the new screensavers,  nice job 
> promoting Qubes!
> 

Thanks, raahelps!

- -- 
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
-BEGIN PGP SIGNATURE-

iQIcBAEBCgAGBQJYdxWFAAoJENtN07w5UDAwJHEP/3RIfke/ML8/gqplrAdSadtt
B0AyHT74FDQflOM0Uk36AqSbqY2GPrWbI/gLemLjfKGPUiS6ys9tl1XXrsEWM1mQ
JVUIyJGklJArlbFscmy/RgN7i2UZ30SM0zEnKgoyoyPC7A6To/762vg6hfPTyv35
hET/Hy7G3FR8V5c89BzUjDUecdJogWp3gY2JiCFMozOQjd+xumP8YaZQmOCgcZIc
xH5Zxqtw62CUp1YzfyEI7Qhx0Z4ccZ8YPdAbwXa7puGYGwGpOvrkfEZQ0InTgd7c
hDsTuCrPAQLO2JHKyBF4armVIOH0+L+LGSl3mWCLd7LxUyLkrJpextvz1te9BlIG
Wi6TwRSDBS9wF+NEX5btTqNWvbHLWgnL6ALc2N/uxX1fyMvL5RhPZ/EpTU1QzLKP
BdJGuebnNM7FfLagvV7JsKzd7HNxSzwiIeyAwydSCM3n2p2ktdDRbCw3VkRafCiY
h/cOlBE1CsQmkPFwVmVFMwpBgz9FYx8tFRgrtwwxpTle9kh/WhpDFn5DxiGcGDsS
1PKOPX8FwwiOU8HBgm5OlrkawHI5yDxn+y8yz2lOlvklC7uDQTWluPCUgktIb+Ym
XW7Evmb2vTgg+3cJM6IJkFW9wKwgFbsdhadgJE5KShv27CuaWpMmS8O9eD865wOT
lYQmvkO+bWcfWdvcmeV/
=R5f7
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/76a4d9ed-4d20-39e0-d283-ff220804c0a9%40qubes-os.org.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Qubes using Cloudflare - Why?

2017-01-11 Thread Andrew David Wong
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On 2017-01-11 12:34, Andrew David Wong wrote:
> On 01/11/17 11:04, taii...@gmx.com wrote:
>> https://www.eff.org/deeplinks/2017/01/finally-revealed-cloudflare-has-been-fighting-nsls-years
> 
> Three main reasons:
> 
> 1. We distrust the infrastructure anyway.
> 2. It's low-overhead (in terms of the time and work required for
>administrative tasks).
> 3. It's free (as in beer).
> 

On 2017-01-11 12:37, Alex wrote:
> In my understanding of the article, cloudflare is trying to challenge
> the secrecy around broad investigations (by challenging national
> security letters), not the other way around, so I can't see what you are
> lamenting, Taiidan... Would you care to explain?
> 

I mistakenly thought that this was a new thread posing the question in
the subject line and providing a link to that article as a justification
for the question. After viewing the whole thread on Google Groups, I
realize that I've already answered the initial question. (I knew it
seemed familiar!)

This is what happens when people reply to threads without quoting any
part of the existing thread to provide context. :)

I second Alex's question. The article is clearly pro-Cloudflare from the
very first sentence.

- -- 
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
-BEGIN PGP SIGNATURE-
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=0uH4
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/ffb8-0e53-0bc7-7e12-cb9014e21a87%40qubes-os.org.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] How i can play video?

2017-01-11 Thread raahelps
On Wednesday, January 11, 2017 at 4:14:07 PM UTC-5, Andrew David Wong wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA512
> 
> On 01/11/17 07:14, Unman wrote:
> > On Wed, Jan 11, 2017 at 09:07:17AM -0500, 'Repairing' via qubes-users wrote:
> >> Still trying to figure out Qubes,
> >>
> >> When i open movies with "videos application", i get:
> >>
> >> AC-3 (ATSC A/52) decoder, MPEG-4 Video (advanced simple profile) decoder 
> >> are required to play the file, but are not installed.
> >>
> >>
> >> I also tried:
> >>
> >> Banshee
> >> Parole
> >> Snappy
> >>
> >> But there's just black background with them.
> >>
> >> Your time is much appreciated.
> >>
> > 
> > This  comes up so often it should be a FAQ.
> 
> Added: https://www.qubes-os.org/doc/user-faq/#how-do-i-play-video-files
> 
> - -- 
> Andrew David Wong (Axon)
> Community Manager, Qubes OS
> https://www.qubes-os.org
> -BEGIN PGP SIGNATURE-
> 
> iQIcBAEBCgAGBQJYdp//AAoJENtN07w5UDAwGGwQALIFTo6zJ4s/uyAb4NZyhwTO
> eLqQtyylHJF73t0F7NW7Rw+Y/dFDqX5tV/7T+I/is2ok9sEhxf0yTyeqSzfuUA0P
> SNKqh0yD4MSfKQ6N7JFQpA55UBrKUp3uC6/2kpq3WK8xoerXC4zNPSwHC/nIMGzN
> 6mqlVromWRlWd7x+9kpDdlgEnNQxD+BzNL/a9xKdJy1FTx2oYGZBfs1cMaUlzRz3
> /AemPcTrmp0cYCGxY9p5LMsubtA2OGDsRbiWm70RunpYbWDHC+KuvtbJ+HHOT8FI
> l6HcUNrGehTrcNfD2pxq8SFcpbXorS3qlUQWQ3Xypy9dKLUg2Du0mSROP3q5GEgf
> s8RpprIhk49txImZLM+FsnijXoDesQnd1QX3qbJ2WvWRLwzeWp6YuegSSvF5djM+
> YMsRQJBd50JhfMrQKUspAbQGAhw/9DyDyrP5zCRTRD4pxEiWH/5Qtv6tIspea5i7
> ORQR69ASC8aqzuvvm9xTWoxctqPo2w/Rso78+PUsu/t8IuuGEZA2gAN8Zg4zRRYQ
> 5Q4XxHeRh4jgEEhkvDLg13cqvtOE7lBr9Cgw3YdbpBcCEJEjf7qboApfoXr8NZcw
> pSOHzqNOxCUUNnyIrHVI3g3hJZD1vPcaJB5VexIS6tmdhcUgKa2qnKc1KCJVvRNS
> W7mO8rQkjRpAfyO2Qxif
> =f8Yo
> -END PGP SIGNATURE-

ah nice i was looking everywhere for the easy way to enable rpmfusion without 
having to download it. I remember you had mentioned it before on here but 
couldn't find the thread. 

You might want to add to set the output mode in vlc to x11, otherwise it use 
too much cpu%.

Hey Andrew I seen you on an episode of the new screensavers,  nice job 
promoting Qubes!

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/b94224bc-3734-4bf5-93d7-d4cf7a791aac%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Bad GPG sig on R3.2 release

2017-01-11 Thread raahelps
worked for me 

gpg -v --verify Qubes-R3.2-x86_64.iso.DIGESTS 
gpg: armor header: Hash: SHA256
gpg: armor header: Version: GnuPG v2
gpg: original file name=''
gpg: Signature made Tue 20 Sep 2016 01:37:03 PM EDT using RSA key ID 03FA5082
gpg: using PGP trust model
gpg: Good signature from "Qubes OS Release 3 Signing Key"
gpg: textmode signature, digest algorithm SHA256

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/d39bdfb3-c605-4876-9fa5-32a46f666987%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: What's your DispVM high score?

2017-01-11 Thread raahelps
On Wednesday, January 11, 2017 at 3:21:40 PM UTC-5, Andrew wrote:
> Today I impressed myself when the DispVM I launched was "disp52" (in ~1
> week of uptime). /pats self on back
> 
> What's your highest DispVM number you've accomplished through legitimate
> daily use?
> 
> (This is purely for fun.  Don't let meaningless numbers get in the way
> of updates!)
> 
> Andrew

when I bought my psu for the pc I built for qubes the salesman thought I was 
building a nas, but I shut my pc off every night...lol  i think disp7 is 
highest I've gone only.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/6363108c-86fa-431e-896b-c885deb4b9ef%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Setup for Graphic Design work / Failing to configure a PCI pasthrough on Archlinux

2017-01-11 Thread joseph . yenglin
Hello.

Firstly, thank you for taking the time to read this, I'll be brief.

I'm a graphic designer, and a paranoid. With Qubes OS, I aspire to peform both 
of these roles at the same time, even if that requires some adaptation. I'm 
familiar with using Windows,the Adobe Creative Suite (Photoshop and 
Illustrator, occasionally InDesign), and working with a 13' Cintiq tablet 
(http://www.wacom.com/en-us/products/pen-displays/cintiq-13-hd). The laptop 
I've installed Qubes on is an Dell Inspiron 15 5547 
(http://www.pcworld.idg.com.au/review/dell/inspiron_15_5547/545787/specs/ and 
https://wiki.archlinux.org/index.php/Dell_Inspiron_5547).

At first, I've tried installing running a windows 7 HVM, but gave up on the 
idea after discovering it would not work, as of now, with my Cintiq due to 
limitations on assigning it a USB controller 
(https://groups.google.com/forum/#!searchin/qubes-users/windows$20usb%7Csort:relevance/qubes-users/PtUAMzZGUHU/efAzwol9AwAJ).
 Then, I've installed Archlinux, intending on using Wine to run the 
applications. To be honest, I don't know if this is the most appropriate 
solution. I'm figuring this thing out as I go along.

As of now, I've created an AppVM based upon the Archlinux template, and tried 
to assign it an USB controller (00:14.0 USB controller: Intel Corporation 8 
Series USB xHCI HC (rev 04), and a GPU (03:00.0 Display controller: Advanced 
Micro Devices, Inc. [AMD/ATI] Topaz XT [Radeon R7 M260/M265]). Eventually I'll 
have to figure out where is the HDMI exit in the lspci output list but, as of 
now, when assign those two pieces of hardware to the AppVM, it fails to boot. 
Even worse, from that point on, any other VM will also fail to boot until I 
restart the computer.

So, I would like to ask of you: is this solution most appropriate for its 
intended use? If so, how does one solve its technical issues? If not, what are 
the alternatives?

Again, I would like to thank you for your help.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/34bacf2c-90c2-41fb-8845-4acff7d175d6%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Unsolicited feedback on qubes-issue #2455

2017-01-11 Thread Daniel Moerner
On Sunday, November 27, 2016 at 10:33:05 AM UTC-5, Alex wrote:
> On 11/26/2016 11:59 PM, Marek Marczykowski-Górecki wrote:
> >> - Qubes-GUID crashed in one AppVM as soon as I started monodevelop
> >> the first time. Cannot reproduce this problem either. Error in guid
> >> log was:
> > 
> >> ErrorHandler: BadAccess (attempt to access private resource
> >> denied) Major opcode: 130 (MIT-SHM) Minor opcode: 1 (X_ShmAttach) 
> >> ResourceID:   0x254 Failed serial number:  3670 Current serial
> >> number: 3671
> > 
> >> may be related to the fact that monodevelop shows and hides many
> >> windows in rapid sequence when starting?
> > 
> > Yes, it may be. Very similar error (#2171) was already fixed some
> > time ago, but apparently not all the cases. Anyway it's rather
> > problem in gui-daemon, independent of Fedora version.
> Ok, this problem happened again, and always when starting monodevelop.
> Now I collected more logs, and tried to fiddle a bit with qubes-guid.
> 
> In dmesg there's nothing interesting apart from 238 repetitions of this
> line just before the crash manifested with all windows from that VM
> disappearing:
> [   77.469369] U2MFN_GET_MFN_FOR_PAGE: get_user_pages failed,
> ret=0xfff2

I just hit this bug in sys-net using a F25 template. nm-applet silently 
crashed, the VM state turned yellow in Qubes VM Manager, and the log was filled 
with this error.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/2f6d47d7-7af2-4720-9781-41f3e7cd8906%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] What's your DispVM high score?

2017-01-11 Thread Ángel
Andrew wrote:
> What's your highest DispVM number you've accomplished through legitimate
> daily use?

About 10, achieved while debugging them. DispVMs don't work here :)

(courtesy of https://github.com/QubesOS/qubes-issues/issues/2182
I wish there was an option to disable savefiles usage. Slow-to-start
dispvms would be better than having no dispvms at all)



PS: dispvm count in a day would be more fair to compare.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/1484180866.1220.16.camel%4016bits.net.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Bad GPG sig on R3.2 release

2017-01-11 Thread jordan . rickman . 42
I am a first-time Qubes user, and was about to install the latest (3.2) from 
qubes-os.org. Verifying the ISO with the Release 3 signing key looks good. The 
SHA256 sum of the ISO matches the sum in the digest file. But the digest file 
itself fails GPG verification (against the release 3 key). The 3.1 digest file 
does not.

I was hoping someone else could check the 3.2 digests file as downloaded from 
https://www.qubes-os.org/downloads/, and see if it's got a bad GPG sig or if 
it's just me.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/4f87bee8-577d-4822-aa69-672f77fa37ff%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] how to print on a network printer out of a standalone windows hvm?

2017-01-11 Thread Ángel
kreil...@gmail.com wrote:
> My question is:
> how can I manage to print directly on my network printer? 
> or:
> how to copy files (without using a usb hdd or something like this)from my 
> windows hvm to my printer appvm?

You could connect the Windows VM to a printer-vm per
https://www.qubes-os.org/doc/firewall/#enabling-networking-between-two-qubes

At that point you could:
a) Make Windows print to the cups service in the printer-vm
or
b) Copy the files to the printer-vm (eg. with samba)


Connecting directly to the real network printer may be from simple (eg.
just providing an IP address, because it's just autodiscovery that
fails) to quite complicated.


-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/1484175675.1220.8.camel%4016bits.net.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: HCL - Dell XPS 15 9550

2017-01-11 Thread John Doe
On Sunday, January 8, 2017 at 10:38:49 PM UTC, bbrr...@gmail.com wrote:
> In original configuration this laptop suffers from freeze on initial boot 
> when the system attaches the broadcom wifi card to sys-net. To make progress 
> needed to disable the wifi card in BIOS, install was then straightforward. 
> 
> Used an USB wifi for initial investigation/updates. Needed to assign the USB 
> controller to the sys-net VM and allow non strict pci reset. ThenuUpgraded 
> the fedora23 kernel to the version in unstable repository:
> 
> Linux sys-net 4.8.12-12.pvops.qubes.x86_64 #1 SMP Sat Dec 3 19:12:54 UTC 2016 
> x86_64 x86_64 x86_64 GNU/Linux
> 
> As there is only one USB controller on this board, this is not a great 
> long-term solution. I then replaced the broadcom wifi card with an Intel 8265 
> which works very well with the 4.8 v kernel. Generally everything now seems 
> to work well: suspend works, touchpad works well, screen dimming, attaching 
> usb storage. No touchscreen on this model so can't comment on that.

Did your 9550 not come with a Killer 1535? At least that's what is listed on 
the product page, http://www.dell.com/uk/p/xps-15-9550-laptop/pd?ref=PD_OC

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/bf03fc83-2871-422c-8449-29e51e8d07c7%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Network hardware not recognized in Debian-based NetVM

2017-01-11 Thread Andrew David Wong
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On 01/11/17 14:18, 'Joshua Bashir Gabriel' via qubes-users wrote:
> Hello,
> 
> Although the default NetVM in Qubes is based on Fedora, I wanted to
> be able to use NetworkManager 1.4.2 to automatically spoof my MAC
> address when connecting to networks. In order to do this, I
> followed the instructions here:
> 
> https://www.qubes-os.org/doc/anonymizing-your-mac-address/
> 
> I created a new template for Debian 9 as instructed, then created a
> new NetVM from that template and added the Network Connections app
> to it, as well as my WiFi adapter (under the Devices tab).
> 
> However, the Debian-based NetVM will not see the hardware. The
> Fedora-based NetVM can see it fine, but when I power that down and
> power up the Debian-based VM, no such luck.
> 
> I am running Qubes 3.2 with all the latest updates applied. This
> email was sent from a Firefox session inside a disposable VM, so I
> know using the Fedora-based NetVM works. I also created additonal
> NetVMs based on Fedora, Debian 8, and Debian 9. The Debian-based
> NetVMs do not see my WiFi card. The Fedora-based NetVM does.
> 
> Any advice would be very appreciated.
> 
> 
> Thanks, Bash
> 

Perhaps you have the required drivers in your Fedora template but not
your Debian template. You may want to investigate whether they're
available in a Debian package.

- -- 
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
-BEGIN PGP SIGNATURE-
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=/OP4
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/c583d040-4131-5bd7-2c93-51b188962cb3%40qubes-os.org.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Network hardware not recognized in Debian-based NetVM

2017-01-11 Thread 'Joshua Bashir Gabriel' via qubes-users
Hello,

Although the default NetVM in Qubes is based on Fedora, I wanted to be able to 
use NetworkManager 1.4.2 to automatically spoof my MAC address when connecting 
to networks. In order to do this, I followed the instructions here:

https://www.qubes-os.org/doc/anonymizing-your-mac-address/

I created a new template for Debian 9 as instructed, then created a new NetVM 
from that template and added the Network Connections app to it, as well as my 
WiFi adapter (under the Devices tab).

However, the Debian-based NetVM will not see the hardware. The Fedora-based 
NetVM can see it fine, but when I power that down and power up the Debian-based 
VM, no such luck.

I am running Qubes 3.2 with all the latest updates applied. This email was sent 
from a Firefox session inside a disposable VM, so I know using the Fedora-based 
NetVM works. I also created additonal NetVMs based on Fedora, Debian 8, and 
Debian 9. The Debian-based NetVMs do not see my WiFi card. The Fedora-based 
NetVM does.

Any advice would be very appreciated.


Thanks,
Bash

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/VKjARPkjhmmf4fi-dU0yre22yTFY3MCsWtCnh0ElUreeErpy5cPsd6utRWvpl61UoLgb1xjXgneV70M_w5XMYUkF6vQ3J0mOx1W7ydW0NU0%3D%40protonmail.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Can NOT get Broadcom BCM43602 Wifi Card working , DELL XPS 15 9950- Qubes sys-net freezes/ crashes

2017-01-11 Thread John Doe
On Monday, January 9, 2017 at 5:14:11 PM UTC, qmast...@gmail.com wrote:
> Tuesday, 4 August 2016, 17:45:39 UTC+3 kelo wrote:
> > anyone knows a solution to get it working somehow with this specific dell 
> > xps 15 wirless card the 
> >  Broadcom BCM43602 .  Im not an expert with anything terminal related.
> 
> Broadcom wireless cards always require proprietary closed drivers, which are 
> probably not just full of backdoors but also contain a lot of badly written 
> code with security vulnerabilities and bugs. Their hardware is not good 
> either... maybe Broadcom could be acceptable for Windows users, but it really 
> sucks for Linux ! At the same time, wireless cards of Atheros ath9k family - 
> are running on 100% open source drivers, and giving a quite good 
> quality/power of signal. https://wikidevi.com/wiki/Atheros <--- from this 
> list, I recommend Atheros AR9462, it is the best card of ath9k family - 
> supports 2.4GHz & 5GHz WiFi networking, as well as Bluetooth 4.0 . It works 
> flawlessly with QubesOS, I have tested it. AR9462 could be received from 
> AliExpress or eBay for less than $10, shipping included, so there are no 
> reasons to continue struggling with low end Broadcom card - that was shipped 
> with your laptop only because it was among the cheapest options for laptop's 
> manufacturer (only a few people care about preinstalled wireless cards, so 
> the manufacturers are usually going for the cheapest offer, which is often 
> Broadcom)
> 
> The only catch there is: your manufacturer could have installed a WiFi card 
> whitelist in your BIOS, which prevents booting your computer if non-listed 
> wireless card has been found. However, it is possible to mod your BIOS file 
> and break this artificial limitation - either by removing whitelist 
> completely, or disabling a check for it, or altering the whitelist to replace 
> device IDs of whitelisted WiFi card with device ID of your new WiFi card. 
> Luckily, there are already a lot of BIOS'es with whitelist removed, available 
> at bios-mods site and other websites, so if your laptop's model is relatively 
> popular - you are likely to find that someone already did that work for you. 
> Also, in some lucky cases, your laptop is supported by Coreboot or Libreboot 
> project - which do not contain any whitelists, and could replace the 
> manufacturer's BIOS...
> 
> From what I see online, XPS 9550 does not have any WiFi card whitelist. Good 
> for you ;)

Thank you very much for that advice! I've ordered a AR9462. Estimated delivery 
27 Jan 2017 - 16 Mar 2017!
The 9550 actually comes with a "Killer 1535 802.11ac 2x2 WiFi and Bluetooth 
4.1".

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/324ffbc2-9b58-43fb-95d0-91f3c8ea39d3%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Can NOT get Broadcom BCM43602 Wifi Card working , DELL XPS 15 9950- Qubes sys-net freezes/ crashes

2017-01-11 Thread recordedidentity
On Monday, January 9, 2017 at 5:14:11 PM UTC, qmast...@gmail.com wrote:
> Tuesday, 4 August 2016, 17:45:39 UTC+3 kelo wrote:
> > anyone knows a solution to get it working somehow with this specific dell 
> > xps 15 wirless card the 
> >  Broadcom BCM43602 .  Im not an expert with anything terminal related.
> 
> Broadcom wireless cards always require proprietary closed drivers, which are 
> probably not just full of backdoors but also contain a lot of badly written 
> code with security vulnerabilities and bugs. Their hardware is not good 
> either... maybe Broadcom could be acceptable for Windows users, but it really 
> sucks for Linux ! At the same time, wireless cards of Atheros ath9k family - 
> are running on 100% open source drivers, and giving a quite good 
> quality/power of signal. https://wikidevi.com/wiki/Atheros <--- from this 
> list, I recommend Atheros AR9462, it is the best card of ath9k family - 
> supports 2.4GHz & 5GHz WiFi networking, as well as Bluetooth 4.0 . It works 
> flawlessly with QubesOS, I have tested it. AR9462 could be received from 
> AliExpress or eBay for less than $10, shipping included, so there are no 
> reasons to continue struggling with low end Broadcom card - that was shipped 
> with your laptop only because it was among the cheapest options for laptop's 
> manufacturer (only a few people care about preinstalled wireless cards, so 
> the manufacturers are usually going for the cheapest offer, which is often 
> Broadcom)
> 
> The only catch there is: your manufacturer could have installed a WiFi card 
> whitelist in your BIOS, which prevents booting your computer if non-listed 
> wireless card has been found. However, it is possible to mod your BIOS file 
> and break this artificial limitation - either by removing whitelist 
> completely, or disabling a check for it, or altering the whitelist to replace 
> device IDs of whitelisted WiFi card with device ID of your new WiFi card. 
> Luckily, there are already a lot of BIOS'es with whitelist removed, available 
> at bios-mods site and other websites, so if your laptop's model is relatively 
> popular - you are likely to find that someone already did that work for you. 
> Also, in some lucky cases, your laptop is supported by Coreboot or Libreboot 
> project - which do not contain any whitelists, and could replace the 
> manufacturer's BIOS...
> 
> From what I see online, XPS 9550 does not have any WiFi card whitelist. Good 
> for you ;)

My XPS 9550 hasn't arrived yet, but is there any way I can check for any 
available open BIOS on either Coreboot or Libreboot?
Haven't found what motherboard the system uses

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/42406df6-1320-4dec-b096-41b0a6b35dd0%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Unable to create Windows7 HVM

2017-01-11 Thread bartabbas
Le mardi 10 janvier 2017 17:35:25 UTC+1, 01v3g4n10 a écrit :
> On Tuesday, January 10, 2017 at 10:17:26 AM UTC-6, bartabbas wrote:
> > hello,
> > 
> > 
> > 
> > I'm just installing Qubes OS 3.2 on a dualcore arch. The install process 
> > runs fine, with no errors.
> > 
> > After install and post-install processes (no errors apparently), I try to 
> > create a new VM on the Qubes VM manager.
> > 
> > I've got a message, but no new VM :
> > 
> > ERROR: invalid argument: could not find capabilities for arch=x86_64
> > 
> > help welcome, but warning : be explicit;  I'm a rookie on Qubes ;)
> > 
> > best regards,
> > bartabbas
> 
> You need to enable VT-x in your bios if your cpu contains it.
> https://www.qubes-os.org/doc/hvm/
> 
> If you are unsure then check with hardware compatibility list.
> https://www.qubes-os.org/doc/hcl/

Ok, thanks for the answer.

I'm afraid there's no VT or so technology on my computer; seen no options in 
BIOS ..
I'll post a HCL report as soon as possible

bartabbas

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/aaba8b11-114e-4c84-9c94-5da3b2a3aac2%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] How i can play video?

2017-01-11 Thread Andrew David Wong
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On 01/11/17 07:14, Unman wrote:
> On Wed, Jan 11, 2017 at 09:07:17AM -0500, 'Repairing' via qubes-users wrote:
>> Still trying to figure out Qubes,
>>
>> When i open movies with "videos application", i get:
>>
>> AC-3 (ATSC A/52) decoder, MPEG-4 Video (advanced simple profile) decoder are 
>> required to play the file, but are not installed.
>>
>>
>> I also tried:
>>
>> Banshee
>> Parole
>> Snappy
>>
>> But there's just black background with them.
>>
>> Your time is much appreciated.
>>
> 
> This  comes up so often it should be a FAQ.

Added: https://www.qubes-os.org/doc/user-faq/#how-do-i-play-video-files

- -- 
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
-BEGIN PGP SIGNATURE-

iQIcBAEBCgAGBQJYdp//AAoJENtN07w5UDAwGGwQALIFTo6zJ4s/uyAb4NZyhwTO
eLqQtyylHJF73t0F7NW7Rw+Y/dFDqX5tV/7T+I/is2ok9sEhxf0yTyeqSzfuUA0P
SNKqh0yD4MSfKQ6N7JFQpA55UBrKUp3uC6/2kpq3WK8xoerXC4zNPSwHC/nIMGzN
6mqlVromWRlWd7x+9kpDdlgEnNQxD+BzNL/a9xKdJy1FTx2oYGZBfs1cMaUlzRz3
/AemPcTrmp0cYCGxY9p5LMsubtA2OGDsRbiWm70RunpYbWDHC+KuvtbJ+HHOT8FI
l6HcUNrGehTrcNfD2pxq8SFcpbXorS3qlUQWQ3Xypy9dKLUg2Du0mSROP3q5GEgf
s8RpprIhk49txImZLM+FsnijXoDesQnd1QX3qbJ2WvWRLwzeWp6YuegSSvF5djM+
YMsRQJBd50JhfMrQKUspAbQGAhw/9DyDyrP5zCRTRD4pxEiWH/5Qtv6tIspea5i7
ORQR69ASC8aqzuvvm9xTWoxctqPo2w/Rso78+PUsu/t8IuuGEZA2gAN8Zg4zRRYQ
5Q4XxHeRh4jgEEhkvDLg13cqvtOE7lBr9Cgw3YdbpBcCEJEjf7qboApfoXr8NZcw
pSOHzqNOxCUUNnyIrHVI3g3hJZD1vPcaJB5VexIS6tmdhcUgKa2qnKc1KCJVvRNS
W7mO8rQkjRpAfyO2Qxif
=f8Yo
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/80854014-1b44-d6d4-e0c0-52ed6a8fb4c6%40qubes-os.org.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Qubes using Cloudflare - Why?

2017-01-11 Thread Alex
In my understanding of the article, cloudflare is trying to challenge 
the secrecy around broad investigations (by challenging national 
security letters), not the other way around, so I can't see what you are 
lamenting, Taiidan... Would you care to explain?



--

Alex


Il 11/01/2017 21:34, Andrew David Wong ha scritto:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On 01/11/17 11:04, taii...@gmx.com wrote:

https://www.eff.org/deeplinks/2017/01/finally-revealed-cloudflare-has-been-fighting-nsls-years


Three main reasons:

1. We distrust the infrastructure anyway.
2. It's low-overhead (in terms of the time and work required for
administrative tasks).
3. It's free (as in beer).

- -- 
Andrew David Wong (Axon)

Community Manager, Qubes OS
https://www.qubes-os.org
-BEGIN PGP SIGNATURE-

iQIcBAEBCgAGBQJYdpazAAoJENtN07w5UDAwtzUP+wYdIX9LrCMcFdqTs/iXc9D8
djoaQGLiZGDN4rNTRc5lQBCCF0HdemetPfVIWwrDr8d8s+QenO3v27tc539WOA2e
jHmGGJvmufrRaHuAwStgka87nolrVnbKRlRk+acc8wzoU45LMT+uMHo+JLCQCop/
QnU5XTBjBwKXaC/7kFa6N6TRM+ZQAEbiBytMhlESAkscYcu5LespOdKy/EQvPrWy
4ybEB8IgFmEqAKA15XP55djG+9OCJU1ey7QNv6q+9VrVXrV0tzcG+X7p8sy4PWaZ
w9YM16IcXho+uLevZlFqUGNVIsrcBjAyCSIYlORYYA2RiP9+MaOp3po8bj+fB2Qn
nBv2zMeS9tcwTjukm9aVr42JkCJOGu5j++O7cLNIBvzVx9dk9nUJLdIEFI2gtR1/
rsfNaFRYyIc/ftlYOxzOkigVcgi06Z8VuUYyWtazewGgi+SEp39IwxCqicuul+Om
nxCxS9X/uLKzx/nZXMwNk/gEZUE+fexIFEJDaoahufGm0uAtVuNaCI3XwsAw/GwG
dO4+v9XyUTztlkP8N+KLzSd9/GQbShNfDvx0IVDm452UVda9D5EUj55mH8E5qvcT
fRGhfuEtEYoKX6bpUtcxaKp2yhXb8g93r+e4+/6J3/Jcn3dDOzZpY8BDK8ZtiKLm
SQIPLFU5mIw4XNQg5sKL
=SHSH
-END PGP SIGNATURE-



--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/795017f2-ecdc-94d1-23f3-0ec26def4b43%40gmx.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Qubes using Cloudflare - Why?

2017-01-11 Thread Andrew David Wong
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On 01/11/17 11:04, taii...@gmx.com wrote:
> https://www.eff.org/deeplinks/2017/01/finally-revealed-cloudflare-has-been-fighting-nsls-years
>

Three main reasons:

1. We distrust the infrastructure anyway.
2. It's low-overhead (in terms of the time and work required for
   administrative tasks).
3. It's free (as in beer).

- -- 
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
-BEGIN PGP SIGNATURE-
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=SHSH
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/7a3e8580-10a0-178b-af71-7b01e2b1730b%40qubes-os.org.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] What's your DispVM high score?

2017-01-11 Thread Andrew
Today I impressed myself when the DispVM I launched was "disp52" (in ~1
week of uptime). /pats self on back

What's your highest DispVM number you've accomplished through legitimate
daily use?

(This is purely for fun.  Don't let meaningless numbers get in the way
of updates!)

Andrew

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/3c7ca3e4-8af8-1067-8792-5e629f39b77d%40riseup.net.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] unbound and DNS-Crypt

2017-01-11 Thread Arnulf Maria Bultmann
Hello,
I would like to install unbound and DNSCrypt. I suppose I have to install it 
first in the fedora24 template which is the base for the sys-net vm?
Is there any how-to or posting for this issue?
Is there anybody who can - and is willing ;) - to help me?

thx in advance

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/fb9232fd-f498-4456-83f0-8ebefa6962fe%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: Domains Have Internet But Templates No

2017-01-11 Thread 'Aloxis' via qubes-users
You need to enable network access in the template's firewall tab. Also using a 
browser on a template is a great way to permenately compromise the security of 
all of your vms in one fell swoop. Might as well not even use Qubes at that 
point. You have been warned.


On Wed, Jan 11, 2017 at 12:05 PM, <'raahe...@gmail.com'> wrote:
On Wednesday, January 11, 2017 at 12:38:00 PM UTC-5, Repairing wrote:
> There's no problem to connect to the internet with domains:
>
> anon-whonix
>
> personal
>
> untrusted
>
>
>
> But i need to connect through templates:
>
> fedora
>
> debian
>
>
>
> There's no connection, white blank screen when i use firefox, how i can 
> connect to the firefox with templates?

why do you need to use firefox in the template?

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/aa5578ef-6f63-4ea2-9262-048fd286afd8%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/DxvKgdFEfpiCLI7NGeeQocAeEi9dWuHT1il8Jxg_IPIJapW23Uxopq-AL6fBcY37hDOCgz_cgqP94ThFeDvKvH8a8tPk-8KO9GyaMplxgQ0%3D%40protonmail.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Domains Have Internet But Templates No

2017-01-11 Thread raahelps
On Wednesday, January 11, 2017 at 12:38:00 PM UTC-5, Repairing wrote:
> There's no problem to connect to the internet with domains:
> 
> anon-whonix
> 
> personal
> 
> untrusted
> 
> 
> 
> But i need to connect through templates:
> 
> fedora
> 
> debian
> 
> 
> 
> There's no connection, white blank screen when i use firefox, how i can 
> connect to the firefox with templates?

why do you need to use firefox in the template?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/aa5578ef-6f63-4ea2-9262-048fd286afd8%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Qubes using Cloudflare - Why?

2017-01-11 Thread taii...@gmx.com

https://www.eff.org/deeplinks/2017/01/finally-revealed-cloudflare-has-been-fighting-nsls-years

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/f7014d0f-9914-79cf-199f-e18bd4a69be6%40gmx.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Domains Have Internet But Templates No

2017-01-11 Thread Unman
On Wed, Jan 11, 2017 at 06:43:31PM +0100, john.david.r.smith wrote:
> On 11/01/17 18:37, 'Repairing' via qubes-users wrote:
> >There's no problem to connect to the internet with domains:
> >anon-whonix
> >personal
> >untrusted
> >
> >But i need to connect through templates:
> >fedora
> >debian
> >
> >There's no connection, white blank screen when i use firefox, how i can 
> >connect to the firefox with templates?
> >
> 
> first you should not do this.
> its a security issue (hence it is disabled).
> if something owns the firefox in the template, all vms based on that
> template are owned.
> why do you want to do this?
> 
> how to enable access:
> settings -> firewall rules -> allow full access for 5 min -> ok
> 

I'd recommend you read the documentation on this and weigh up what you
are doing. There's little point in having Qubes if you are going to
use it in ways that negate the security it aims for.

www.qubes-os.org/doc/software-update-vm  is an excellent guide - try
reading it.

templates *do* have internet access by default. It is restricted to
access via an upstream proxy which provides some filtering. This enables
you to use tools to install software without opening full access.

You CAN open up the firewall as suggested. But you should be aware that
there is a critical bug that often means that that access is not closed
off at the end of the 5 mins.
An alternative approach would be to download whatever files or packages
you want in a dispVM nd then copy them to the template and install
them locally.

But I really would suggest that you take a little while to read and
understand what Qubes offers and how it works before launching in.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/2017081921.GA23541%40thirdeyesecurity.org.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Domains Have Internet But Templates No

2017-01-11 Thread john.david.r.smith

On 11/01/17 18:37, 'Repairing' via qubes-users wrote:

There's no problem to connect to the internet with domains:
anon-whonix
personal
untrusted

But i need to connect through templates:
fedora
debian

There's no connection, white blank screen when i use firefox, how i can connect 
to the firefox with templates?



first you should not do this.
its a security issue (hence it is disabled).
if something owns the firefox in the template, all vms based on that 
template are owned.

why do you want to do this?

how to enable access:
settings -> firewall rules -> allow full access for 5 min -> ok

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/9c568d45-d997-3c66-4ecd-1623686f13de%40openmailbox.org.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Domains Have Internet But Templates No

2017-01-11 Thread 'Repairing' via qubes-users
There's no problem to connect to the internet with domains:
anon-whonix
personal
untrusted

But i need to connect through templates:
fedora
debian

There's no connection, white blank screen when i use firefox, how i can connect 
to the firefox with templates?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/uLMFAS8iJclpEbUUAl7xMkHd-zKcvT7TIlrpwhx9GblhdO-ePUpTujLzFZXEGvBOH8LHwHRUFFExM1umRsWSWuDkeiGy6sgDd0REBr3aE98%3D%40protonmail.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users]

2017-01-11 Thread Joseph Yenglin


-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CACxcMYvoSTXiHejSnbjoLosN%2BP6UEp_EHC8bT7hvORNKrhpQoA%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] How i can play video?

2017-01-11 Thread Unman
On Wed, Jan 11, 2017 at 04:47:24PM +0100, haaber wrote:
> There may be an alternate solution : play videos with debian8. It should
> ship ffmpeg related players, right?   Bernhard
> 
> 
> On 01/11/2017 04:14 PM, Unman wrote:
> > On Wed, Jan 11, 2017 at 09:07:17AM -0500, 'Repairing' via qubes-users wrote:
> >> Still trying to figure out Qubes,
> >>
> >> When i open movies with "videos application", i get:
> >>
> >> AC-3 (ATSC A/52) decoder, MPEG-4 Video (advanced simple profile) decoder 
> >> are required to play the file, but are not installed.
> >>
> >>
> >> I also tried:
> >>
> >> Banshee
> >> Parole
> >> Snappy
> >>
> >> But there's just black background with them.
> >>
> >> Your time is much appreciated.
> >>
> > 
> > This  comes up so often it should be a FAQ.
> > The decoders you need don't ship with Fedora - they may be buggy, patent
> > encumbered and nasty, so Fedora doesn't include them.
> > But they are available from the RPM Fusion repository.
> > 
> > Look at the bottom of www.qubes-os.org/doc/software-update-vm
> > Enable that repo (if you must)
> > Then you'll be able to install the decoders you need - most likely from
> > gstreamer, you want gstreamer good, bad and ugly plugins to cover all
> > sorts of cases and ffmpeg and libav
> > I'd advise you to clone your existing fedora template and pollute the
> > clone with all this stuff, and then use that clone to back the qubes
> > where you want to play Videos.
> > 

Please don't top post.

You're right, switching to a Debian template is almost always the right
answer. :-)

The Debian templates dont ship with a player, but installing vlc will
pull in required libraries and decoders, and is good solution.

Repairing will have to install vlc in a template, (again I'd suggest
cloning) and then use THAT template for the qube where s/he wants to
watch Videos.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/2017064523.GB22418%40thirdeyesecurity.org.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: Can NOT get Broadcom BCM43602 Wifi Card working , DELL XPS 15 9950- Qubes sys-net freezes/ crashes

2017-01-11 Thread raahelps
On Tuesday, January 10, 2017 at 6:42:51 PM UTC-5, tai...@gmx.com wrote:
> On 01/10/2017 06:28 PM, solved1 wrote:
> 
> > I had the same problem the easiest thing is to replace the broadcom wifi 
> > card.
> > its really simple to do that.
> >
> > order yourself an Intel Wifi card like me. costs around 45 USD
> > it will work without doing anything once you replaced the broadcom card no 
> > need
> > to type in any commands.
> >
> Intel wi-fi requires binary blobs which are a black box and will stop 
> working eventually.
> 
> Get yourself one with a realtek or atheros chipset that doesn't require 
> blobs such as A5K or A9K series, they will cost less than an intel 
> chipset as well.

You can check this list if you want to make sure it  libre. 
https://h-node.org/wifi/catalogue/en/1/1/undef/undef/yes?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/2d5baff8-43e1-44be-9047-45fd9e8f6225%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Fedora "/tmp"

2017-01-11 Thread raahelps
I've had to increase this on past fedora qubes vms so long videos wouldn't time 
out.  Never had an issue with debian though.  And I haven't had the issue on 
fresh system with the latest fedora.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/be8763fa-4836-411a-9c91-802260b97cd8%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: How i can play video?

2017-01-11 Thread raahelps
On Wednesday, January 11, 2017 at 9:07:30 AM UTC-5, Repairing wrote:
> Still trying to figure out Qubes,
> 
> 
> 
> When i open movies with "videos application", i get:
> 
> 
> 
> AC-3 (ATSC A/52) decoder, MPEG-4 Video (advanced simple profile) decoder are 
> required to play the file, but are not installed.
> 
> 
> 
> 
> I also tried:
> 
> 
> 
> Banshee
> 
> Parole 
> 
> Snappy
> 
> 
> 
> But there's just black background with them.
> 
> 
> 
> Your time is much appreciated.

Use VLC media player.  and just make sure to change video output settings to 
x11.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/c22989a6-effc-46ea-843a-12d41167ff3e%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] are skylake / kaby lake laptops just screwed?

2017-01-11 Thread taii...@gmx.com

On 01/11/2017 05:34 AM, pixel fairy wrote:


https://www.scmagazine.com/debugging-mechanism-in-intel-cpus-allows-seizing-control-via-usb-port/article/630480/

in part of the talk he said to disable dci in the bios, but in q&a he seemed to 
say that doesnt help. i have a 7th gen and found no option to disable it.

Don't you just love intel's attitude to security? This should trigger a 
recall and replacement of all the offending processors but I guarantee 
their reply will pretty much be "buy a new one lol" just like with my 
two favorites:
* their first gen IOMMU/TXT implementation that didn't have interrupt 
remapping and was thus almost useless for security (whereas AMD's had it 
from the start)
* Intel ME 5.0 that enabled network access by default so you didn't even 
need to look for an exploit


I wonder what other wonderful little intel cpu/me exploits are waiting 
behind the curtain.


How much do you want to bet this oversight was made by a bunch of low 
wage HCL/infosys types?


--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/785442b5-78f4-6e2c-0c54-8a5235f4a1aa%40gmx.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] How i can play video?

2017-01-11 Thread haaber
There may be an alternate solution : play videos with debian8. It should
ship ffmpeg related players, right?   Bernhard


On 01/11/2017 04:14 PM, Unman wrote:
> On Wed, Jan 11, 2017 at 09:07:17AM -0500, 'Repairing' via qubes-users wrote:
>> Still trying to figure out Qubes,
>>
>> When i open movies with "videos application", i get:
>>
>> AC-3 (ATSC A/52) decoder, MPEG-4 Video (advanced simple profile) decoder are 
>> required to play the file, but are not installed.
>>
>>
>> I also tried:
>>
>> Banshee
>> Parole
>> Snappy
>>
>> But there's just black background with them.
>>
>> Your time is much appreciated.
>>
> 
> This  comes up so often it should be a FAQ.
> The decoders you need don't ship with Fedora - they may be buggy, patent
> encumbered and nasty, so Fedora doesn't include them.
> But they are available from the RPM Fusion repository.
> 
> Look at the bottom of www.qubes-os.org/doc/software-update-vm
> Enable that repo (if you must)
> Then you'll be able to install the decoders you need - most likely from
> gstreamer, you want gstreamer good, bad and ugly plugins to cover all
> sorts of cases and ffmpeg and libav
> I'd advise you to clone your existing fedora template and pollute the
> clone with all this stuff, and then use that clone to back the qubes
> where you want to play Videos.
> 
> 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/0fafcdf0-85b2-60e2-3ed1-1617d9d66231%40web.de.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] How i can play video?

2017-01-11 Thread Unman
On Wed, Jan 11, 2017 at 09:07:17AM -0500, 'Repairing' via qubes-users wrote:
> Still trying to figure out Qubes,
> 
> When i open movies with "videos application", i get:
> 
> AC-3 (ATSC A/52) decoder, MPEG-4 Video (advanced simple profile) decoder are 
> required to play the file, but are not installed.
> 
> 
> I also tried:
> 
> Banshee
> Parole
> Snappy
> 
> But there's just black background with them.
> 
> Your time is much appreciated.
> 

This  comes up so often it should be a FAQ.
The decoders you need don't ship with Fedora - they may be buggy, patent
encumbered and nasty, so Fedora doesn't include them.
But they are available from the RPM Fusion repository.

Look at the bottom of www.qubes-os.org/doc/software-update-vm
Enable that repo (if you must)
Then you'll be able to install the decoders you need - most likely from
gstreamer, you want gstreamer good, bad and ugly plugins to cover all
sorts of cases and ffmpeg and libav
I'd advise you to clone your existing fedora template and pollute the
clone with all this stuff, and then use that clone to back the qubes
where you want to play Videos.


-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/2017051452.GA22418%40thirdeyesecurity.org.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] how to print on a network printer out of a standalone windows hvm?

2017-01-11 Thread kreillor
In the end I managed to install windows (thx to all people posting in this 
mailing list, it helped a lot) but one problem is persistent:
I can't find my network printer from windows and therefore I can't print 
directly.
I tried to copy a pdf made by free-pdf to my printer-vm, it does'nt work. I 
couldn't find a way to copy a file from the windows hvm to my printer appvm.
On the other hand there is no problem copying the clipboard to other vms...

My question is:
how can I manage to print directly on my network printer? 
or:
how to copy files (without using a usb hdd or something like this)from my 
windows hvm to my printer appvm?

thnx a lot in advance

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/0908cef1-048d-427b-80b0-dc875b1e6cb1%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] How i can play video?

2017-01-11 Thread 'Repairing' via qubes-users
Still trying to figure out Qubes,

When i open movies with "videos application", i get:

AC-3 (ATSC A/52) decoder, MPEG-4 Video (advanced simple profile) decoder are 
required to play the file, but are not installed.


I also tried:

Banshee
Parole
Snappy

But there's just black background with them.

Your time is much appreciated.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/f2pB7FODCt0vixs_7JsofjfEcUs0F-0NhbSIkKqoouaVa-98XDsxEbfNI_4g86EQooax8rlD_5y_c1D4XeAncOs-3jp4vQ0_c8mrz77DUI0%3D%40protonmail.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] How i can transfer files to Dom0

2017-01-11 Thread Unman
On Wed, Jan 11, 2017 at 05:59:34AM -0500, 'Repairing' via qubes-users wrote:
> Hey,
> 
> i need to transfer files to my main vm, because other vm have only 2gb free 
> space, i tried to click right mouse and click copy to another vm, but it does 
> not work.
> I need to have all my files in my main vm:
> /home/user/downloads
> 
> Thanks, for help!
> 

Don't do this - there isn't a simple mechanism for transferring files to
Dom0 just to dissuade you from using it.

What you want to do is expand the storage for your qubes - just go to
properties in the Manager and change the allocated size -(Private
Storage max size).

The whole point of Qubes is that you don't have all your files in one
place - if you think you need to do this then you either haven't understood
the core value of Qubes or your life is so interleaved that you can't
take advantage of that core value.
If you don't get what I'm talking about look at
www.qubes-os.org/intro and have a think about it again.


-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/2017014807.GA21322%40thirdeyesecurity.org.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] are skylake / kaby lake laptops just screwed?

2017-01-11 Thread Robert Fisk
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On 01/11/2017 11:34 PM, pixel fairy wrote:
> https://www.scmagazine.com/debugging-mechanism-in-intel-cpus-allows-seizing-control-via-usb-port/article/630480/
>
>  in part of the talk he said to disable dci in the bios, but in q&a
> he seemed to say that doesnt help. i have a 7th gen and found no
> option to disable it.
> 


Also relevant: Intel SVT Closed Chassis Adapter. Yours for only $390.

https://designintools.intel.com/product_p/itpxdpsvt.htm

> Intel® Silicon View Technology Closed Chassis Adapter (also known 
> as SVTCCA or BSSB) provides access to DFx-features, like JTAG and 
> Run-control, through USB3 port(s) on Intel® Direct Connect 
> Interface (DCI) enabled silicon and platforms. The tool enables 
> closed-chassis use-cases where USB3-hosted DCI is limited, 
> intermittent, or unavailable and includes initial cold boot, 
> suspend-state operation and survival, Reset-flows, and USB3 or
> IOSF path failures.

Sweet dreams!

Robert
-BEGIN PGP SIGNATURE-
Version: GnuPG v2
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=mkaD
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/706fb5cb-5401-e478-3fbc-cbea473fd065%40fastmail.fm.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] How i can transfer files to Dom0

2017-01-11 Thread 'Repairing' via qubes-users
Hey,

i need to transfer files to my main vm, because other vm have only 2gb free 
space, i tried to click right mouse and click copy to another vm, but it does 
not work.
I need to have all my files in my main vm:
/home/user/downloads

Thanks, for help!

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/k29poAxsBVfNG-RoitjydihQviJMRMWO_swLYYIe8s8c7_XqEIRyQ0ZhhVM71MwC9W-pfTyqx_v8GhnGX-lj3wKJhfFZX3woFiIiWsKRqGc%3D%40protonmail.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] are skylake / kaby lake laptops just screwed?

2017-01-11 Thread pixel fairy
https://www.scmagazine.com/debugging-mechanism-in-intel-cpus-allows-seizing-control-via-usb-port/article/630480/

in part of the talk he said to disable dci in the bios, but in q&a he seemed to 
say that doesnt help. i have a 7th gen and found no option to disable it.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/6370ebf2-62c4-4ecf-8f51-69006d3e3e34%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: Fedora Desktop in Qubes

2017-01-11 Thread Andrew David Wong
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On 2017-01-10 23:06, Patrick Bouldin wrote:
> On Sunday, January 8, 2017 at 11:33:35 PM UTC-5, Andrew David Wong wrote:
> On 2017-01-08 14:57, Patrick Bouldin wrote:
 On Sunday, January 8, 2017 at 11:15:56 AM UTC-5, Andrew David Wong wrote:
 On 2017-01-07 18:27, Patrick Bouldin wrote:
>>> On Saturday, January 7, 2017 at 3:21:42 AM UTC-5, Andrew David Wong 
>>> wrote:
>>> On 2017-01-06 14:37, Patrick Bouldin wrote:
>> On Wednesday, December 28, 2016 at 2:41:28 AM UTC-5, Andrew David
>> Wong wrote: On 2016-12-27 12:39, Patrick Bouldin wrote:
> On Tuesday, December 27, 2016 at 2:13:48 PM UTC-5, Patrick
> Bouldin wrote:
>> On Tuesday, December 27, 2016 at 2:11:04 PM UTC-5, Patrick
>> Bouldin wrote:
>>> On Tuesday, December 27, 2016 at 2:04:28 PM UTC-5,
>>> Patrick Bouldin wrote:
 On Wednesday, December 21, 2016 at 6:13:24 AM UTC-5,
 Patrick Bouldin wrote:
> Hi, I saw some threads on this but am not clear at a
> high level.
>
> I thought I would install dropbox client on one of my
> Fedora VMs so that working with files is much
> smoother than from a browser. So, is installing a
> Fedora Desktop the best plan to do that? Don't assume
> I know enough of native Qubes ability please - maybe
> I'm missing a key point!
>
> Thanks, Patrick

 Thanks David. housekeeping question - before I started
 I copied my Fedora template, just in case. Am I correct
 I can easily undo those changes incorrectly made by
 deleting the template and renaming the backup template
 to the production one (just deleted)?

>>
>> Yes, that's correct.
>>
>>>
>>> Sorry, I meant Andrew!
>>
>>
>> No worries.
>>
>> And I see it works so disregard, Andrew - thanks again.
>
> Wow, this is a bear for me.
>
> Dropbox said:Add the following to /etc/yum.conf.
>
>
> name=Dropbox Repository 
> baseurl=http://linux.dropbox.com/fedora/\$releasever/ 
> gpgkey=http://linux.dropbox.com/fedora/rpm-public-key.asc
>
> So I performed a sudo gedit on that file and added the above
> three lines. When I saved it I received this:
>
> ** (gedit:1791): WARNING **: Set document metadata failed:
> Setting attribute metadata::gedit-position not supported 
> [user@fedora-24 ~]$
>
> So I do see that you can't save metadata by extending the
> yum.conf file, and tried a few other things that I think it
> was suggesting.
>
>>
>> No, I think that's just a warning message about the gedit program 
>> itself. Should be safe to disregard. You can verify that the
>> contents of the file were saved with `cat /etc/yum.conf`.
>>
> When I try and run $ sudo dnf install nautilus-dropbox I get
> this: Last metadata expiration check: 0:14:35 ago on Tue Dec
> 27 15:23:35 2016. No package nautilus-dropbox available. 
> Error: Unable to find a match.
>
>>
>> Try this:
>>
>> $ sudo dnf --refresh install nautilus-dropbox
>>
>> If that still doesn't work, try creating a separate repo file, 
>> `/etc/yum.repos.d/dropbox.repo`, with this content:
>>
>> [Dropbox] name=Dropbox Repository 
>> baseurl=http://linux.dropbox.com/fedora/$releasever/ 
>> gpgkey=https://linux.dropbox.com/fedora/rpm-public-key.asc
>>
>> Then try this again:
>>
>> $ sudo dnf --refresh install nautilus-dropbox
>>
>>
>> Darn, still not working - I noticed this link is not working:
>> baseurl=http://linux.dropbox.com/fedora/\$releasever/ 
>> gpgkey=http://linux.dropbox.com/fedora/rpm-public-key.asc
>>
>>
>> So it's not finding the file, tested that just in my browser
>> address bar.
>>
>> Patrick
>>
>>>
>>> I wouldn't expect that to work in your browser address bar due to the
>>> backslash, but I have to ask: Why not try following the instructions I
>>> provided in the previous email (to which you're replying)?
>>>
>>> Hi Andrew, I did follow them precisely, I just started fumbling around 
>>> on my own - basically it still says it can't find the file, errors out 
>>> - just like 

[qubes-users] HCL HP Pavilion dv6 2150eg

2017-01-11 Thread nonhero
working flawlessly sofar,

did not test:
- integrated gpu passthrough
- usb mouse works only the first time connecting it (reboot breaks), did
not attempt to fixit

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/e1652f30f8c2bfdf43d4fe3c4d26e727.webmail%40localhost.
For more options, visit https://groups.google.com/d/optout.


Qubes-HCL-Hewlett_Packard-HP_Pavilion_dv6_Notebook_PC-20170111-095951.cpio.gz
Description: application/gzip


Qubes-HCL-Hewlett_Packard-HP_Pavilion_dv6_Notebook_PC-20170111-095951.yml
Description: application/yaml