[qubes-users] Re: QSB #30: Critical Xen bugs related to PV memory virtualization (XSA-213, XSA-214)

2017-05-02 Thread pixel fairy
On a more immediate or practical level, i was going to ask about a qubes 3.2.1 release for all the things that have been building up, or perhaps a 3.3 release, with the significant change of moving to hvm by default. that way, theres less incentive to rush the 4.x releases. -- You received thi

Re: [qubes-users] HCL - 20H2S00700

2017-05-02 Thread reubenprevost
On Thursday, February 23, 2017 at 5:40:19 AM UTC-6, Mike Keehan wrote: > On Thu, 23 Feb 2017 11:35:26 + > Mike Keehan wrote: > > > On Tue, 14 Feb 2017 12:03:45 +0100 > > Vincent Wiemann wrote: > > > > > ... > > > > > Installation only possible with VNC as text installation mode > > > doe

[qubes-users] Re: Fed 25 offer in AppVM

2017-05-02 Thread cooloutac
On Tuesday, May 2, 2017 at 9:36:45 PM UTC-4, Pimm wrote: > curious, why in an AppVM in the software gui I am offered to upgrade > Fedora 25 to, however in the QVM there is no such offer, nor does the > software gui suggest Fedora 25 , seems curious, I suppose I'm to just > ignore whatever

[qubes-users] Re: qubesctl error message

2017-05-02 Thread cooloutac
On Tuesday, May 2, 2017 at 10:09:27 PM UTC-4, not myna wrote: > think I've figured out that even attaching the yubikey to the AppVM I > want , isn't going to allow me to use it . and since I've USB > adapter pluggin my keyboard into the PS2 port, maybe the whole > odydessy(sp) or sys-usb, I

Re: [qubes-users] Re: cp/mv from win7VM to other VMs?

2017-05-02 Thread Gaiko
On Tuesday, May 2, 2017 at 2:39:01 AM UTC-4, Eva Star wrote: > On 04/29/2017 10:25 PM, Gaiko wrote: > > On Friday, April 28, 2017 at 9:58:48 PM UTC-4, Reg Tiangha wrote: > >> On 04/28/2017 07:45 PM, Gaiko Kyofusho wrote: > >>> Appologies if this is obvious but I only saw it was "possible" in the >

[qubes-users] qubesctl error message

2017-05-02 Thread not myna
think I've figured out that even attaching the yubikey to the AppVM I want , isn't going to allow me to use it . and since I've USB adapter pluggin my keyboard into the PS2 port, maybe the whole odydessy(sp) or sys-usb, I want to avoid, however, I seem to be unable to reset to no sys-usb

[qubes-users] Re: Youtube/Video Problem

2017-05-02 Thread cooloutac
On Tuesday, May 2, 2017 at 4:39:59 PM UTC-4, Qubr wrote: > I have a fresh install of qubes 3.2 and I cannot get Youtube videos to play > in any browser (firefox or chrome). I can see the video loading and I can > skip to different parts and see the frame at that point, but it refuses to > play.

[qubes-users] Fed 25 offer in AppVM

2017-05-02 Thread Pimm
curious, why in an AppVM in the software gui I am offered to upgrade Fedora 25 to, however in the QVM there is no such offer, nor does the software gui suggest Fedora 25 , seems curious, I suppose I'm to just ignore whatever is offered in a AppVM based on Fed23? -- You received this mes

Re: [qubes-users] say it out (loud) - Qubes OS Stickers

2017-05-02 Thread cooloutac
On Tuesday, May 2, 2017 at 5:56:54 PM UTC-4, Darren Fix wrote: > On Tuesday, May 2, 2017 at 12:29:28 PM UTC-6, cooloutac wrote: > > On Monday, May 1, 2017 at 2:44:08 PM UTC-4, Darren Fix wrote: > > > On Monday, May 1, 2017 at 12:37:56 PM UTC-6, cooloutac wrote: > > > > On Friday, April 28, 2017 at

Re: [qubes-users] Windows 10, and laptop

2017-05-02 Thread Eva Star
On 05/03/2017 02:09 AM, n6gh...@gmail.com wrote: > I tryed a Qubes install on my new laptop (lenovo T460P) everything seemed to > work, but shutdown, and reboots hang at a black screen. > > I did some digging and it appears to be a known issue, which has something to > do with unmounting of the x

[qubes-users] Windows 10, and laptop

2017-05-02 Thread n6ghost
I tryed a Qubes install on my new laptop (lenovo T460P) everything seemed to work, but shutdown, and reboots hang at a black screen. I did some digging and it appears to be a known issue, which has something to do with unmounting of the xen store. anyone have any thoughts on this? also, window

Re: [qubes-users] say it out (loud) - Qubes OS Stickers

2017-05-02 Thread Darren Fix
On Tuesday, May 2, 2017 at 12:29:28 PM UTC-6, cooloutac wrote: > On Monday, May 1, 2017 at 2:44:08 PM UTC-4, Darren Fix wrote: > > On Monday, May 1, 2017 at 12:37:56 PM UTC-6, cooloutac wrote: > > > On Friday, April 28, 2017 at 9:59:03 PM UTC-4, Darren Fix wrote: > > > > On Tuesday, April 25, 2017

Re: [qubes-users] Issues with building debian-8-minimal in Qubes Automated Build System

2017-05-02 Thread u+qbsu
wordswithn...@gmail.com [2017-05-02 20:48 +0200]: > 'make install-deps' and manually attempting to install the dependencies > confirms that they're all installed. I got this error when I tried to build debian-8-minimal in fedora-25-minimal (I believe). Do you use fedora-23 as your build environm

[qubes-users] Re: Intel ME exploitable

2017-05-02 Thread cooloutac
On Tuesday, May 2, 2017 at 4:46:33 PM UTC-4, cooloutac wrote: > https://www.amazon.com/Cisco-Linksys-WTR54GS-Wireless-Travel-Speedbooster/dp/B000A1AQOO/ref=sr_1_7?ie=UTF8&qid=1493758122&sr=8-7&keywords=pocket+router > its 35 dollars but I bet none of them are new and they lying. all the complain

[qubes-users] Re: Intel ME exploitable

2017-05-02 Thread cooloutac
https://www.amazon.com/Cisco-Linksys-WTR54GS-Wireless-Travel-Speedbooster/dp/B000A1AQOO/ref=sr_1_7?ie=UTF8&qid=1493758122&sr=8-7&keywords=pocket+router its 35 dollars but I bet none of them are new and they lying. -- You received this message because you are subscribed to the Google Groups "qu

[qubes-users] Re: Intel ME exploitable

2017-05-02 Thread cooloutac
https://www.amazon.com/Cisco-Linksys-WTR54GS-Wireless-Travel-Speedbooster/dp/B000A1AQOO I wonder if they got open source for this one? lol -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails

[qubes-users] Youtube/Video Problem

2017-05-02 Thread 'Qubr' via qubes-users
I have a fresh install of qubes 3.2 and I cannot get Youtube videos to play in any browser (firefox or chrome). I can see the video loading and I can skip to different parts and see the frame at that point, but it refuses to play. My issue is pretty much exactly the same as the issue here: http

[qubes-users] Re: Slimming Down the dom0 Kernel

2017-05-02 Thread cooloutac
On Tuesday, May 2, 2017 at 4:36:16 PM UTC-4, Reg Tiangha wrote: > On 05/02/2017 02:27 PM, cooloutac wrote: > > I never even looked a a cryptography section man tyvm! yes would be very > > awesome to know which ones to disable. very interesting. and what hardware > > etc of course, and we can th

[qubes-users] Re: Slimming Down the dom0 Kernel

2017-05-02 Thread Reg Tiangha
On 05/02/2017 02:27 PM, cooloutac wrote: > I never even looked a a cryptography section man tyvm! yes would be very > awesome to know which ones to disable. very interesting. and what hardware > etc of course, and we can then just copy our config over when building the > next one. I think tha

[qubes-users] Re: Intel ME exploitable

2017-05-02 Thread cooloutac
On Tuesday, May 2, 2017 at 4:33:01 PM UTC-4, cooloutac wrote: > On Tuesday, May 2, 2017 at 4:31:52 PM UTC-4, cooloutac wrote: > > On Tuesday, May 2, 2017 at 3:53:19 PM UTC-4, Reg Tiangha wrote: > > > On 05/02/2017 01:36 PM, cooloutac wrote: > > > > What do you mean by pocket router? Is this like a

[qubes-users] Re: Intel ME exploitable

2017-05-02 Thread cooloutac
On Tuesday, May 2, 2017 at 4:31:52 PM UTC-4, cooloutac wrote: > On Tuesday, May 2, 2017 at 3:53:19 PM UTC-4, Reg Tiangha wrote: > > On 05/02/2017 01:36 PM, cooloutac wrote: > > > What do you mean by pocket router? Is this like a cheap little router to > > > dongle off your pc? it seems interesti

[qubes-users] Re: Intel ME exploitable

2017-05-02 Thread cooloutac
On Tuesday, May 2, 2017 at 3:53:19 PM UTC-4, Reg Tiangha wrote: > On 05/02/2017 01:36 PM, cooloutac wrote: > > What do you mean by pocket router? Is this like a cheap little router to > > dongle off your pc? it seems interesting because I definitely can't trust > > my home router at all... > >

[qubes-users] Re: Slimming Down the dom0 Kernel

2017-05-02 Thread cooloutac
On Tuesday, May 2, 2017 at 4:10:21 PM UTC-4, Reg Tiangha wrote: > On 05/02/2017 01:40 PM, cooloutac wrote: > > you lost me SCSI subsystem, you mean like firmware drivers? and > > cryptopgraphy system? no idea. but sounds very interesting, I appreciate > > your time. > > > > Also if I install a

[qubes-users] Re: Slimming Down the dom0 Kernel

2017-05-02 Thread Reg Tiangha
On 05/02/2017 01:40 PM, cooloutac wrote: > you lost me SCSI subsystem, you mean like firmware drivers? and > cryptopgraphy system? no idea. but sounds very interesting, I appreciate > your time. > > Also if I install all that stuff in my system. Shouldn't I then make sure to > uninstall it al

[qubes-users] Re: Intel ME exploitable

2017-05-02 Thread Reg Tiangha
On 05/02/2017 01:36 PM, cooloutac wrote: > What do you mean by pocket router? Is this like a cheap little router to > dongle off your pc? it seems interesting because I definitely can't trust my > home router at all... > I mean something like this: https://www.asus.com/ca-en/Networking/WL330g

[qubes-users] Re: Slimming Down the dom0 Kernel

2017-05-02 Thread cooloutac
On Tuesday, May 2, 2017 at 3:00:07 PM UTC-4, Reg Tiangha wrote: > On 05/02/2017 12:41 PM, cooloutac wrote: > > I too would have trouble compiling kernel for fedora too.I only know > > how to do it with debian using make-kpkg which is much easier. > > > The Qubes kernel build scripts actually m

[qubes-users] Re: Intel ME exploitable

2017-05-02 Thread cooloutac
On Tuesday, May 2, 2017 at 2:50:24 PM UTC-4, Reg Tiangha wrote: > On 05/02/2017 11:37 AM, David Hobach wrote: > > > > > > On 05/02/2017 07:25 AM, Vít Šesták wrote: > >> * I wonder what does “exploitable locally” mean. If physical access > >> is required, I am not sure what would attacker gain (AEM

[qubes-users] Re: Slimming Down the dom0 Kernel

2017-05-02 Thread Reg Tiangha
On 05/02/2017 12:41 PM, cooloutac wrote: > I too would have trouble compiling kernel for fedora too.I only know how > to do it with debian using make-kpkg which is much easier. > The Qubes kernel build scripts actually make it very easy; assuming you have all the software dependencies installe

[qubes-users] Re: Intel ME exploitable

2017-05-02 Thread Reg Tiangha
On 05/02/2017 11:37 AM, David Hobach wrote: > > > On 05/02/2017 07:25 AM, Vít Šesták wrote: >> * I wonder what does “exploitable locally” mean. If physical access >> is required, I am not sure what would attacker gain (AEM bypass at >> most, I guess). If it allows unprivileged user to elevate privi

[qubes-users] Issues with building debian-8-minimal in Qubes Automated Build System

2017-05-02 Thread wordswithnemo
I'm stuck partway through the process. I'm following the directions here: https://www.qubes-os.org/doc/building-archlinux-template/ with substitutions for debian-8-minimal. I've gotten through with minimal problems (had to manually create ~/qubes-builder/keyring folders), but came across a maj

[qubes-users] Re: sys-usb issues ; yubikey, etc

2017-05-02 Thread cooloutac
On Monday, May 1, 2017 at 8:18:29 PM UTC-4, ftb.myna wrote: > I do see https://github.com/adubois/qubes-app-linux-yubikey > > however, I think compiling it might be over my head. Can I just > shutdown sys-usb and operate without it again ? I definitely need the > yubikey to work, but my other

[qubes-users] Re: Slimming Down the dom0 Kernel

2017-05-02 Thread cooloutac
On Tuesday, May 2, 2017 at 5:13:48 AM UTC-4, Reg Tiangha wrote: > On 05/02/2017 12:57 AM, Eva Star wrote: > > All of this sounds very good. But most of us not so advanced unix > > users to compile kernel and install it. Maybe, somebody (as I) can > > try, but there is no readme on your repository h

Re: [qubes-users] Re: Intel ME exploitable

2017-05-02 Thread cooloutac
On Tuesday, May 2, 2017 at 2:15:42 PM UTC-4, Foppe de Haan wrote: > Maybe, but if that applies, what is there to do except to work around it (by > not using that NIC), and/or to hope that AMD will indeed release the code for > Ryzen's PSP? Ya we at mercy of vendors. not update for my board yet.

Re: [qubes-users] say it out (loud) - Qubes OS Stickers

2017-05-02 Thread Gaiko
On Friday, April 21, 2017 at 7:46:28 PM UTC-4, Dominique St-Pierre Boucher wrote: > On Friday, April 21, 2017 at 6:38:35 PM UTC-4, cooloutac wrote: > > On Friday, April 21, 2017 at 9:06:04 AM UTC-4, Jean-Philippe Ouellet wrote: > > > On Fri, Apr 21, 2017 at 8:16 AM, Franz wrote: > > > > On Thu, Ap

Re: [qubes-users] say it out (loud) - Qubes OS Stickers

2017-05-02 Thread cooloutac
On Monday, May 1, 2017 at 2:44:08 PM UTC-4, Darren Fix wrote: > On Monday, May 1, 2017 at 12:37:56 PM UTC-6, cooloutac wrote: > > On Friday, April 28, 2017 at 9:59:03 PM UTC-4, Darren Fix wrote: > > > On Tuesday, April 25, 2017 at 9:09:06 AM UTC-6, cooloutac wrote: > > > > On Monday, April 24, 2017

Re: [qubes-users] Re: Intel ME exploitable

2017-05-02 Thread Foppe de Haan
Maybe, but if that applies, what is there to do except to work around it (by not using that NIC), and/or to hope that AMD will indeed release the code for Ryzen's PSP? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this gro

Re: [qubes-users] Re: Intel ME exploitable

2017-05-02 Thread David Hobach
On 05/02/2017 07:25 AM, Vít Šesták wrote: * I wonder what does “exploitable locally” mean. If physical access is required, I am not sure what would attacker gain (AEM bypass at most, I guess). If it allows unprivileged user to elevate privileges, this might be interesting for Qubes, dependin

Re: [qubes-users] Re: Opening links in your preferred AppVM

2017-05-02 Thread Gaiko Kyofusho
Thanks for the reply! my ~/.local/share/applications/mimeapps.list is a bit different than yours, really I was most interested in it handling http/https [Default Applications] text/html=open_work_vm.desktop x-scheme-handler/http=open_work_vm.desktop x-scheme-handler/https=open_work_vm.desktop x-s

Re: [qubes-users] Right click+scroll to switch workspaces?

2017-05-02 Thread Gaiko
On Tuesday, May 2, 2017 at 2:37:12 AM UTC-4, Eva Star wrote: > On 04/29/2017 10:10 PM, Gaiko Kyofusho wrote: > > Quite awhile ago (in win) I had an app that created workspaces like most > > lin win-managers have but it also had a really niffty shortcut where one > > could (anywhere on the screen) r

[qubes-users] Re: Qubes Security Bulletin - should ideally we be creating all TemplateVMs as HVMs?

2017-05-02 Thread wordswithnemo
I understand that the most recent issue is being patched as we speak, but I'm curious whether the best practice (given the history of PV-related fatal issues in Xen) would be to recreate all TemplateVMs as HVMs moving forward - ahead of Q4.0 obviously. -- You received this message because you

[qubes-users] Re: Opening links in your preferred AppVM

2017-05-02 Thread wordswithnemo
On Wednesday, June 22, 2016 at 2:38:22 PM UTC-4, Micah Lee wrote: > I published a quick blog post explaining how I do this: > > https://micahflee.com/2016/06/qubes-tip-opening-links-in-your-preferred-appvm/ Any thoughts (Micah or the community), on whether this creates an avenue for persistent c

[qubes-users] Re: [qubes-announce] QSB #30: Critical Xen bugs related to PV memory virtualization (XSA-213, XSA-214)

2017-05-02 Thread Holger Levsen
On Tue, May 02, 2017 at 07:10:05AM -0500, Andrew David Wong wrote: > We have just published Qubes Security Bulletin (QSB) #30: > Critical Xen bugs related to PV memory virtualization (XSA-213, XSA-214). sad news, but very well written, thanks a lot for taking the time to do so! > Commentary > ==

[qubes-users] QSB #30: Critical Xen bugs related to PV memory virtualization (XSA-213, XSA-214)

2017-05-02 Thread Andrew David Wong
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Dear Qubes community, We have just published Qubes Security Bulletin (QSB) #30: Critical Xen bugs related to PV memory virtualization (XSA-213, XSA-214). The text of this QSB is reproduced below. This QSB and its accompanying signatures will always

[qubes-users] Re: Slimming Down the dom0 Kernel

2017-05-02 Thread Reg Tiangha
On 05/02/2017 12:57 AM, Eva Star wrote: > All of this sounds very good. But most of us not so advanced unix > users to compile kernel and install it. Maybe, somebody (as I) can > try, but there is no readme on your repository how to do this and > install it :) > > p.s. Maybe you forget about table(

Re: [qubes-users] Re: Opening links in your preferred AppVM

2017-05-02 Thread u+qbsu
Gaiko [2017-05-02 03:36 +0200]: > > What happens if you run `qvm-open-in-vm work https://qubes-os.org` in > > tbirdVM > > it seems to work just fine that way > > > and when you run xdg-open https://qubes-os.org in the work VM > > (without the quotes)? > > ok, xdg-open I hadn't tried. But regar

Re: [qubes-users] Re: Intel ME exploitable

2017-05-02 Thread Ilpo Järvinen
On Mon, 1 May 2017, Vít Šesták wrote: > * I wonder what does “exploitable locally” mean. If physical access is > required, I am not sure what would attacker gain (AEM bypass at most, I > guess). If it allows unprivileged user to elevate privileges, this might > be interesting for Qubes, dependi