Re: [qubes-users] File syncing between Qubes

2020-07-17 Thread 799
Michael Haynes  schrieb am Do., 16. Juli 2020, 22:18:

> This got me wondering:
>
> *Question: Is there a simple way to setup a dedicated "server" VM*
> *using WebDAV to allow qubes to [automatically / periodically] exchange
> encrypted data even without Internet access?  If so, what are the security
> implications of doing this?  If not, what are some alternative ways of
> automating data transfers between qubes?*
>

You could look into sshfs which is able to mount a remote filesystem over
ssh.

799

>

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CAJ3yz2sy7GcrKWe2Ldu2v49Dsem0QWORE5w-KPn4NQ%3DxOUYWBQ%40mail.gmail.com.


Re: [qubes-users] File syncing between Qubes

2020-07-16 Thread 'awokd' via qubes-users
Michael Haynes:

> *Question: Is there a simple way to setup a dedicated "server" VM*
> *using WebDAV to allow qubes to [automatically / periodically] exchange
> encrypted data even without Internet access?  If so, what are the
> security implications of doing this?  If not, what are some alternative
> ways of automating data transfers between qubes?
> *

Not really a simple way to do it, because like you said, the point of
Qubes is isolation. However, Qubes does have a mechanism (Qubes RPC) to
transfer data between qubes. Look into split-gpg or
https://github.com/freedomofpress/securedrop-proxy, for example. I don't
know if that mechanism could be adapted for your use case. There are
several security implications common to browser extensions in general:

- As an extension, it may have access to your browser history among
other browser contents. Some extensions have been found surreptitiously
phoning home that data.
- Some extensions can uniquely mark your requests, so web browsing
across different qubes could be linked.
- Probably more I'm not thinking of.

Simplest approach might be to only have one Joplin enabled web browser,
then copy & paste links you want to keep to it from browsers in other
qubes. You could then script a qvm-copy to run periodically, or develop
something with qubes-rpc to make it available to other qubes.

-- 
- don't top post
Mailing list etiquette:
- trim quoted reply to only relevant portions
- when possible, copy and paste text instead of screenshots

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/275c600c-90fc-36a4-1b4a-a91dda3055cd%40danwin1210.me.


[qubes-users] File syncing between Qubes

2020-07-16 Thread Michael Haynes
The following question is likely to raise some eyebrows, given that the
point of using Qubes is to achieve security through domain isolation. 
Thus, I'll start with a brief summary of the context to indicate why I'm
interested in this topic--the actual question is printed *in bold*
below.  I should also apologize at the outset for any stupidity in this
question--I'm pretty new at Qubes, and also at networking (e.g., I've
never setup a server of any kind before).

Here's the background:  I use Joplin, a markdown editor and notetaker,
to manage daily notes / TODO's / journal entries / many other things. 
In particular, when I encounter a website or article I'd like to stash
for later reading or reference, I use Joplin's build-in "web clipper"
extension on Firefox to save a MD version of the page to a Joplin
notebook.  Unfortunately, since I tend to do most of my journaling and
personal work in a network-isolated VM, while web clippings end up in
notebooks on networked VMs, I currently have a bunch of fragmentary
Joplin notebooks scattered across several VMs.  I could manually pass
clippings between qubes using qvm-copy, but that's painfully repetitive
and kind of defeats the time-saving purpose of an app like Joplin.

One of the nice things about Joplin is that it offers a number of ways
to cloud-sync notebooks across devices (similar to Evernote, but without
the proprietary software / file formats).  This got me wondering:

*Question: Is there a simple way to setup a dedicated "server" VM*
*using WebDAV to allow qubes to [automatically / periodically] exchange
encrypted data even without Internet access?  If so, what are the
security implications of doing this?  If not, what are some alternative
ways of automating data transfers between qubes?
*

Thanks in advance for any help.

~~Mike
**

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/384a019e-6560-9c66-6f7a-a56967e16092%40gmail.com.


0x54F042B3D26CCD7C.asc
Description: application/pgp-keys


signature.asc
Description: OpenPGP digital signature