Re: [qubes-users] Whonix update error??
On Monday, February 18, 2019 at 12:00:53 AM UTC-5, 22...@tutamail.com wrote: > Mus be the Australian government and the five eyes! > > I tried it on a clone and it update no issues...tried it on my main templates > as-is/no change to http(fromhttps) and they happened to work fine. > > Next time I will consider the option of waiting... > > Xaver rock! Thx... Yes you are targeted way more with MITM attacks when updating with tor I've learned. You really have to pay attention to any notifications before hitting Yes. Such as invalid signature, etc... But even the best of us can hit y by accident. Sometimes when I have issues updating. I will update from qubes-manager, or I will update manually from console, which sometimes will give different results. For examplesometimes will notice a notification on one but not the other. I think this is the biggest way to attack qubes users. Through updates. Its what Spengler threatened Joanna with.Especially dom0 updates you need to be extra careful. Most of us have hardware thats already screwed, imo. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/dc55bd2a-6eeb-4e28-88fe-452a36e8e389%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Whonix update error??
Mus be the Australian government and the five eyes! I tried it on a clone and it update no issues...tried it on my main templates as-is/no change to http(fromhttps) and they happened to work fine. Next time I will consider the option of waiting... Xaver rock! Thx... -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/5676e005-48f1-4c20-a562-8e080aab6f77%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Whonix update error??
22...@tutamail.com: Thx... That did it but if I just waited would it correct itself? Most likely. Seems not so secure to update via http? Is one generally better off waiting for it to maybe correct itself vs updates via http? It's a risk management decision. Which do you feel is the greater risk: being behind on patches a couple days, or possibly being more vulnerable to a MITM attack during an update cycle? With properly signed packages, MITM shouldn't be an issue but there's not a single right answer, and it could change if there's an active exploit circulating that the patches address. Personally, I'll usually wait a day or two to see if the onion sites work unless there's an active, Qubes impacting exploit going around. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/e331ec41-759f-73d3-60d0-8b1187c8a7bc%40danwin1210.me. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Whonix update error??
Thx... That did it but if I just waited would it correct itself? Seems not so secure to update via http? Is one generally better off waiting for it to maybe correct itself vs updates via http? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/8fcc7e21-3d81-4b4a-bf98-183ec7b4f30e%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Whonix update error??
Sent with ProtonMail Secure Email. ‐‐‐ Original Message ‐‐‐ On Sunday, February 17, 2019 11:36 PM, <22...@tutamail.com> wrote: > I am not sure what the issue is but I am struggling to update my whonix > templates via the GUI, update icon(star icon) or manually?? > > I get an error similar to this: > > Ign:1 http://ftp.us.debian.org/debian stretch InRelease > Hit:2 http://deb.qubes-os.org/r4.0/vm stretch InRelease > ... > Err:12 tor+http://sgvtcaew4bxjd7ln.onion stretch/updates Release > Connection failed > Reading package lists... Done > E: The repository 'tor+http://sgvtcaew4bxjd7ln.onion stretch/updates Release' > does no longer have a Release file. > N: Updating from such a repository can't be done securely, and is therefore > disabled by default. > N: See apt-secure(8) manpage for repository creation and user configuration > details. > Done. > > I copied this from this link(https://www.whonix.org/wiki/Qubes/Update) but my > error is very similar...sometimes the error is: > > Err:7 > Err:8 > > The link(https://www.whonix.org/wiki/Qubes/Update) states this is likely a > Whonix error but I am unsure...I tried to update this yesterday and got the > same error. > > Is there anything else I should do? Should I just wait another day? My Qubes > manager is stating the template needs to be updated (Green arrow). > > Other notes: > > - I open tor-control-panel and it shows I am using TOR(Green) > - I look in the tor-control-panel log and the only flag is the following: > > Feb 17 23:13... [warn] Socks version 71 not recognized. (This port is not > an HTTP proxy; did you want to use HTTPTunnelPort?) > > However it still appears to reconnect > *I do a whonix check when connecting via an Appvm and it states: ! "Could > not check for software updates" this seems like a common error that I have > seen before, however it never seemed to inhibit the template update > > Any help would be appreciated... You can point Whonix towerd http://URI (clearnet) repositories. https://www.whonix.org/wiki/Operating_System_Software_and_Updates#Non-functional_Onion_Services -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/dzhrd0NddjuRjixMerZoT6PvZFIqdIjNHxMbgaGFAz2pEkSAkz3ZcbmTt0KxLCzVhjr9lN6fJzlgO1FHOGCjtoNpMHBe2Uo_eg3D9ssQInQ%3D%40protonmail.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Whonix update error??
I am not sure what the issue is but I am struggling to update my whonix templates via the GUI, update icon(star icon) or manually?? I get an error similar to this: Ign:1 http://ftp.us.debian.org/debian stretch InRelease Hit:2 http://deb.qubes-os.org/r4.0/vm stretch InRelease ... Err:12 tor+http://sgvtcaew4bxjd7ln.onion stretch/updates Release Connection failed Reading package lists... Done E: The repository 'tor+http://sgvtcaew4bxjd7ln.onion stretch/updates Release' does no longer have a Release file. N: Updating from such a repository can't be done securely, and is therefore disabled by default. N: See apt-secure(8) manpage for repository creation and user configuration details. Done. I copied this from this link(https://www.whonix.org/wiki/Qubes/Update) but my error is very similar...sometimes the error is: Err:7 Err:8 The link(https://www.whonix.org/wiki/Qubes/Update) states this is likely a Whonix error but I am unsure...I tried to update this yesterday and got the same error. Is there anything else I should do? Should I just wait another day? My Qubes manager is stating the template needs to be updated (Green arrow). Other notes: * I open tor-control-panel and it shows I am using TOR(Green) * I look in the tor-control-panel log and the only flag is the following: Feb 17 23:13... [warn] Socks version 71 not recognized. (This port is not an HTTP proxy; did you want to use HTTPTunnelPort?) However it still appears to reconnect *I do a whonix check when connecting via an Appvm and it states: ! "Could not check for software updates" this seems like a common error that I have seen before, however it never seemed to inhibit the template update Any help would be appreciated... -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/6485d1dd-81e4-444e-b320-c0bba69c2bbe%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Whonix update error in Qubes 3.2, release file expired
Hi, When I try to update my Whonix gateway I have the following error: user@host:~$ sudo apt-get update Hit http://deb.whonix.org jessie InRelease Hit http://deb.qubes-os.org jessie InRelease E: Release file for http://deb.whonix.org/dists/jessie/InRelease is expired (invalid since 4h 5min 45s). Updates for this repository will not be applied. user@host:~$ I tried to clean the cache, change the URL protocol to https, but the error continues. Any ideas? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/db4f84a7-487c-4ce2-8f4a-8b102e4b520c%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
