Re: [qubes-users] How much important is TPM?

2017-03-31 Thread cooloutac
On Friday, March 31, 2017 at 10:45:28 PM UTC-4, cooloutac wrote: > On Friday, March 31, 2017 at 4:20:09 PM UTC-4, Vít Šesták wrote: > > Thanks for your responses. p > > > > In this thread, I'd like to discuss how much can it help (i.e., how hard is > > it to bypass). > > > > On self-encrypting d

Re: [qubes-users] How much important is TPM?

2017-03-31 Thread cooloutac
On Friday, March 31, 2017 at 4:20:09 PM UTC-4, Vít Šesták wrote: > Thanks for your responses. p > > In this thread, I'd like to discuss how much can it help (i.e., how hard is > it to bypass). > > On self-encrypting devices: I generally don't trust those implementations to > be well-reviewed an

[qubes-users] Re: Custom qrexec services

2017-03-31 Thread Jean-Philippe Ouellet
On Sat, Jan 28, 2017 at 9:04 PM, Marek Marczykowski-Górecki wrote: > 1. write USB - _unidirectional_ service to write an fs image into USB > stick (service into USB VM) I like this idea (mostly got tired of ... | qvm-run -p sys-usb 'dd of=/dev/sda') and wrote my own. [1] Not unidirectional, mine

Re: [qubes-users] Security and dispVM firefox customization

2017-03-31 Thread Andrew David Wong
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 2017-03-31 13:02, Jean-Philippe Ouellet wrote: > If you are concerned about the size of your anonymity set then you > ought to be using unmodified TBB in a whonix-ws-based template > rather than Firefox in a DispVM. > > We don't currently make g

Re: [qubes-users] [Debian 8] Audio problem after upgrading

2017-03-31 Thread Chris Laprise
On 03/31/2017 04:21 PM, Chris Laprise wrote: On 03/30/2017 05:32 PM, J. Eppler wrote: Hello, I upgraded my Debian 8 "Jessie" template from Debian Qubes r3.1 to Qubes r3.2. Now, I have problems with the audio output. When I try to play audio files I do not hear anything and music player - web or

[qubes-users] Re: External GPU for just one VM or OpenSWR

2017-03-31 Thread Vít Šesták
The performance on Intel i7-2670QM does not look so promising in those two cases: * glxgears – lower FPS (but glxgears is reportedly not representative) * Smokin' guns – considerably smoother experience with lvmpipe than with openswr. Maybe my CPU is comparatively bad on instructions needed by

[qubes-users] Grabbing mouse pointer

2017-03-31 Thread Vít Šesták
Some continuation of my monolog for those who are interested: I was able to get it working using qubes-input-proxy between VMs. A brief overview: * Another X11 instance running on display :1 with dummy video driver. * VNC server (x0tigervncserver) listening on 127.0.0.1 allowing access to the X

Re: [qubes-users] [Debian 8] Audio problem after upgrading

2017-03-31 Thread Chris Laprise
On 03/30/2017 05:32 PM, J. Eppler wrote: Hello, I upgraded my Debian 8 "Jessie" template from Debian Qubes r3.1 to Qubes r3.2. Now, I have problems with the audio output. When I try to play audio files I do not hear anything and music player - web or deskotp - skip through songs very fast with

Re: [qubes-users] How much important is TPM?

2017-03-31 Thread Vít Šesták
Thanks for your responses. p In this thread, I'd like to discuss how much can it help (i.e., how hard is it to bypass). On self-encrypting devices: I generally don't trust those implementations to be well-reviewed and well-designed, so SED is not a use case for me. Regards, Vít Šesták 'v6ak'

Re: [qubes-users] Security and dispVM firefox customization

2017-03-31 Thread Jean-Philippe Ouellet
If you are concerned about the size of your anonymity set then you ought to be using unmodified TBB in a whonix-ws-based template rather than Firefox in a DispVM. We don't currently make guarantees about the cross-machine uniformity of DispVM browsers. There are ways to fingerprint the default Dis

[qubes-users] Re: Maybe a silly question

2017-03-31 Thread cooloutac
I gave up on Virus scans a couple years ago. I turned into one of the grey bears that use to tell me in the late 90s they were useless... Actually revelations nowadays are that they are not just useless since they can't keep up with literally millions of viruses released every month, accordi

[qubes-users] Re: [Debian 8] Audio problem after upgrading

2017-03-31 Thread cooloutac
On Thursday, March 30, 2017 at 5:32:08 PM UTC-4, J. Eppler wrote: > Hello, > > I upgraded my Debian 8 "Jessie" template from Debian Qubes r3.1 to Qubes > r3.2. Now, I have problems with the audio output. When I try to play audio > files I do not hear anything and music player - web or deskotp -

Re: [qubes-users] Simple Dom0 password manager for an imperfect-but-strong security upgrade?

2017-03-31 Thread cooloutac
On Thursday, March 30, 2017 at 6:21:21 PM UTC-4, Shane Optima wrote: > On Thursday, March 30, 2017 at 5:27:12 PM UTC-4, Chris Laprise wrote: > > I get the feeling when you talk about people contributing, you mean > > /other/ people. That's fine, but in my estimation what you're proposing > > woul

Re: [qubes-users] Security and dispVM firefox customization

2017-03-31 Thread Eva Star
Little explanation if I wrote badly readable text in English. If we will run this customized firefox from dispVM connected to VeryPrivateVPN and from NonVPN(public) then GAVE OVER. -- Regards -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To

[qubes-users] Security and dispVM firefox customization

2017-03-31 Thread Eva Star
https://www.qubes-os.org/doc/dispvm-customization/ Docs say that we can customize our firefox default startup settings and homepage. Docs say is safe. There is no any warnings at the doc about that. But when we starting firefox first time to made ANY customization then firefox profile create

[qubes-users] debian 9: guid/qrexec crashes (fixed by enabling stretch-testing repo+updating)

2017-03-31 Thread Joonas Lehtonen
Hi, just in case others are having similar problems: I'm running Qubes 3.2. I created a fresh debian 9 by upgrading from debian 8. Today the terminal in debian 9 started crashing (closing). In the logs I saw: U2MFN_GET_MFN_FOR_PAG: get_user_pages failed, ret=0x2 (or similar -