Re: [qubes-users] Does anyone trust this for meaningful anonymity?

2018-12-14 Thread mossy
John Smiley:
> I only ask because my, admittedly limited, exposure left me with no 
> confidence at all that it would protect me. I was hitting software and doc 
> bugs left and right. They haven’t gotten basics down yet, so no way I can 
> trust. Fun toy though.  

It's important to understand that the security benefits of Qubes OS are
orthogonal to traditional security measures; meaningful
compartmentalization (unavailable in all other mainstream OS's w/
monolithic kernel) adds an added dimension of security to whatever
existing measures you choose.

Qubes-whonix, though labeled "experimental" by its developers, AFAIK
provides the strongest low-latency anonymity available.  You could run
whonix in whatever OS you currently use, but then with all of the
disadvantages of a monolithic-kernel OS, namely exposure to any buggy or
malicious application or system component that could allow an attacker
to compromise the whole system, along with your anonymity.

Qubes development is due to the (over)work of a very small paid
development team along with a supportive and responsive user/contributor
community.  If you find any features or documentation lacking, it is up
to you to participate in some way and improve the project.

As your experience and resources allow, please consider contributing
documentation, code, questions/answers on the mailing lists, or cash to
the qubes project.

> Fun toy though.

Or instead, you could try to magically improve the project through
sarcasm on the qubes-users mailing list.

-m0ssy

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/d46922eb-87ff-7716-bdfd-58bb39831011%40riseup.net.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Does anyone trust this for meaningful anonymity?

2018-12-14 Thread unman
On Thu, Dec 13, 2018 at 08:21:42PM -0800, John Smiley wrote:
> I only ask because my, admittedly limited, exposure left me with no 
> confidence at all that it would protect me. I was hitting software and doc 
> bugs left and right. They haven’t gotten basics down yet, so no way I can 
> trust. Fun toy though.  
> 

Yes, they do.
Remember though that anonymity is not the *main* aim of Qubes, which is
to provide secure compartmentalization. If you want anonymity then
there are a number of approaches you can take - using Whonix templates
is one of them.

>From what I've seen you have tried the testing release of 4.0.1. The
purpose in testing is to identify software bugs, so you are doing a good
job. Keep reporting them - remember to check if it's covered on the
mailing list or in another issue before raising a new issue.

The docs are a collaborative effort, and you are effectively testing
them too. If you find doc bugs, then you can fix them yourself quite
easily, and make things better for everyone.

cheers

unman

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20181214101430.oith3xrkfyy3lfhr%40thirdeyesecurity.org.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Does anyone trust this for meaningful anonymity?

2018-12-13 Thread John Smiley
I only ask because my, admittedly limited, exposure left me with no confidence 
at all that it would protect me. I was hitting software and doc bugs left and 
right. They haven’t gotten basics down yet, so no way I can trust. Fun toy 
though.  

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/320e3d50-59e0-422d-973e-102305d32223%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.