Re: [qubes-devel] apt RCE

2019-01-22 Thread Chris Laprise
On 01/22/2019 09:51 PM, Marek Marczykowski-Górecki wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Tue, Jan 22, 2019 at 09:44:31PM -0500, Chris Laprise wrote: On 01/22/2019 08:49 PM, unman wrote: On Tue, Jan 22, 2019 at 12:57:37PM -0500, Chris Laprise wrote: On 01/22/2019 12:03 PM,

Re: [qubes-devel] apt RCE

2019-01-22 Thread Marek Marczykowski-Górecki
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Tue, Jan 22, 2019 at 09:44:31PM -0500, Chris Laprise wrote: > On 01/22/2019 08:49 PM, unman wrote: > > On Tue, Jan 22, 2019 at 12:57:37PM -0500, Chris Laprise wrote: > > > On 01/22/2019 12:03 PM, Marek Marczykowski-Górecki wrote: > > > > -BEGI

Re: [qubes-devel] apt RCE

2019-01-22 Thread Chris Laprise
On 01/22/2019 08:49 PM, unman wrote: On Tue, Jan 22, 2019 at 12:57:37PM -0500, Chris Laprise wrote: On 01/22/2019 12:03 PM, Marek Marczykowski-Górecki wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Tue, Jan 22, 2019 at 08:03:01AM -0800, Brendan Hoar wrote: https://justi.cz/security

Re: [qubes-devel] apt RCE

2019-01-22 Thread unman
On Tue, Jan 22, 2019 at 12:57:37PM -0500, Chris Laprise wrote: > On 01/22/2019 12:03 PM, Marek Marczykowski-Górecki wrote: > > -BEGIN PGP SIGNED MESSAGE- > > Hash: SHA256 > > > > On Tue, Jan 22, 2019 at 08:03:01AM -0800, Brendan Hoar wrote: > > > https://justi.cz/security/2019/01/22/apt-rc

Re: [qubes-devel] apt RCE

2019-01-22 Thread Marek Marczykowski-Górecki
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Tue, Jan 22, 2019 at 02:17:35PM -0800, Brendan Hoar wrote: > On Tuesday, January 22, 2019 at 12:57:45 PM UTC-5, Chris Laprise wrote: > > On 01/22/2019 12:03 PM, Marek Marczykowski-Górecki wrote: > ... > > The proxy appears to be 'affected' in the

Re: [qubes-devel] apt RCE

2019-01-22 Thread Brendan Hoar
On Tuesday, January 22, 2019 at 12:57:45 PM UTC-5, Chris Laprise wrote: > On 01/22/2019 12:03 PM, Marek Marczykowski-Górecki wrote: ... > The proxy appears to be 'affected' in the sense that Debian's temporary > update instructions from their security bulletin do not work in the > Qubes template.

Re: [qubes-devel] apt RCE

2019-01-22 Thread Chris Laprise
On 01/22/2019 12:03 PM, Marek Marczykowski-Górecki wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Tue, Jan 22, 2019 at 08:03:01AM -0800, Brendan Hoar wrote: https://justi.cz/security/2019/01/22/apt-rce.html A patch is out to cover this vulnerability, but I'm of the opinion that it m

Re: [qubes-devel] apt RCE

2019-01-22 Thread Marek Marczykowski-Górecki
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Tue, Jan 22, 2019 at 08:03:01AM -0800, Brendan Hoar wrote: > https://justi.cz/security/2019/01/22/apt-rce.html > > A patch is out to cover this vulnerability, but I'm of the opinion that it > may be best to move the qubes-update-proxy worker VMs

Re: [qubes-devel] apt RCE

2019-01-22 Thread Radoslaw Szkodzinski
On Tue, Jan 22, 2019 at 5:03 PM Brendan Hoar wrote: > > https://justi.cz/security/2019/01/22/apt-rce.html > > A patch is out to cover this vulnerability, but I'm of the opinion that it > may be best to move the qubes-update-proxy worker VMs to a disposable VM > model after reading up on this one

[qubes-devel] apt RCE

2019-01-22 Thread Brendan Hoar
https://justi.cz/security/2019/01/22/apt-rce.html A patch is out to cover this vulnerability, but I'm of the opinion that it may be best to move the qubes-update-proxy worker VMs to a disposable VM model after reading up on this one. Granted, at first glance it appears that the use of the qubes

Re: [qubes-devel] Gpu passthrough nvidia 4.0

2019-01-22 Thread Radoslaw Szkodzinski
On Tue, Jan 22, 2019 at 12:47 PM John Mitchell wrote: > AMD consumer based GPU cards have a reset problem in a VM. After using the > VM when you shutdown the VM the card doesn't reset properly. It is reported > that this problem does not exist in the RX 5xx cards and older. AMD messed up time

Re: [qubes-devel] Gpu passthrough nvidia 4.0

2019-01-22 Thread Mataku
I am looking for this yes. -- You received this message because you are subscribed to the Google Groups "qubes-devel" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-devel+unsubscr...@googlegroups.com. To post to this group, send email to qubes-de

Re: [qubes-devel] Re: Password encryption for individual vm's

2019-01-22 Thread 'Raffaele Florio' via qubes-devel
> So at first you are against vm-encryption with the possiblity to use unique > passwords since it was too hard for you to remember multiple passwords. At > the same time you refused to use the same password for more than one VM. > Now you say, your "state" model also relies on ENCRYPTED VMS, whi

Re: [qubes-devel] Gpu passthrough nvidia 4.0

2019-01-22 Thread John Mitchell
On Tuesday, January 22, 2019 at 12:45:43 AM UTC+1, Eric Shelton wrote: > Just a word of warning that passthrough of Nvidia cards to Windows is > somewhere between difficult and impossible on Xen, let alone Qubes: > > https://groups.google.com/d/msg/qubes-devel/J0rWz3Pnmtc/jJGbBGHgAgAJ > > Basica