Re: [qubes-users] Difference between Whonix Workstation and Debian/Fedora?

2018-05-03 Thread entr0py
Daniil .Travnikov: > Could anybody help me to understand what is the difference between Whonix > Workstation and Debian/Fedora? (I mean Templates VM in Qubes). > > When I want to use one of my Debian VM through TOR, I am turn on > Whonix-Gateway. > > And I am asking beacuse I don't understand

Re: [qubes-users] [Newbie] RDP client unable to connect to server through vpn

2017-12-16 Thread entr0py-qubes
Gustavo Lapido Loureiro: > I setup a vpn connection following tasket's Qubes-vpn-support. > (https://github.com/tasket/Qubes-vpn-support) > > I was able to connect to the vpn remote server and browse its web server > content with Firefox. > > However, when I try to use Remmina to connect to

Re: [qubes-users] vpn's log option

2017-12-13 Thread entr0py-qubes
charly LEMMINKÄINEN: > Le mercredi 13 décembre 2017 15:55:39 UTC+1, Chris Laprise a écrit : >> On 12/13/2017 08:38 AM, charly LEMMINKÄINEN wrote: >>> is there any possibility to put a log option in the vpn scripts described >>> in the wiki? To know the reason why a vpn has been disconnected for

Re: [qubes-users] Windows 10 on Qubes (freeRDP)

2017-12-01 Thread entr0py
alvaro.ran...@hotmail.com: > Hi! > > Thanks so much for writing this down. > > On step 2, these instructions to establish inter VM networking [1] seem to be > aimed at linux vms. It says we should use iptables and and edit the rc.local > file on both vms. Any tip on how we could do that on

Re: [qubes-users] Re: sys-whonix / tor / thunderbird

2017-11-25 Thread entr0py
Desobediente: > I think the most straightforward way to achieve this would be to leave the > arm terminal open > > KDE/XCFE Menu > sys-whonix > Arm - Tor Controller > > Then press 'n' for a new identity whenever desired. > > This will make a new tor circuit for every AppVM connected to

Re: [qubes-users] Re: sys-whonix / tor / thunderbird

2017-11-25 Thread entr0py
haaber: > On 11/24/17 13:47, entr0py wrote: >> Yuraeitha: >>> On Friday, November 24, 2017 at 9:01:24 AM UTC, Bernhard wrote: >>>> Hello, >>>> >>>> one of the most useful features of tor-browser is Ctl-Shift-L to change >>>> t

Re: [qubes-users] Re: sys-whonix / tor / thunderbird

2017-11-24 Thread entr0py
Yuraeitha: > On Friday, November 24, 2017 at 9:01:24 AM UTC, Bernhard wrote: >> Hello, >> >> one of the most useful features of tor-browser is Ctl-Shift-L to change >> the tor-path (and so, with high proba, the exit node IP) : this way, >> websites that block a specific exit node for a certain

Re: [qubes-users] When transferring file between Qubes, MD5 changes.

2017-11-16 Thread entr0py
vegetarianst...@gmail.com: > I am transferring a windows ISO file between qubes.. however, the file's MD5 > sum changes every time I complete the transfer. > > Why might this be so? > Shouldn't be happening. I suspect faulty checksum tools in Windows. Use one of the following options: 1.

Re: [qubes-users] IP Redirection to localhost in AppVM

2017-11-10 Thread entr0py
Michael Strasser: > Hi! > > I have an AppVM (Standalone) in which I would like to redirect all (TCP) > traffic going to a specific IP address to localhost. I'm using the AppVM > for Malware Analysis, so I usually have no NetVM connected. I've tried a > few iptables commands that I found via web

Re: [qubes-users] External VM?

2017-01-02 Thread entr0py
Loren Rogers: > Hi all, > > I have a VM that I use for Calibre to read ebooks, and my library is getting > quite large. Rather than putting the books on an external drive and > connecting that to my Calibre VM, would it be possible to move the entire VM > to an external drive? It doesn't need

Re: [qubes-users] Re: Atheros ath9k wireless pci-e not functional in Fedora-24 template

2016-12-18 Thread entr0py
Marek Marczykowski-Górecki: > On Sat, Dec 17, 2016 at 10:56:12AM -0800, 3n7r0...@gmail.com wrote: >> On Friday, December 16, 2016 at 8:36:53 PM UTC, 3n7r...@gmail.com wrote: >>> ath9k is a well supported driver in Linux. Present in kernel since 2.6. >>>

Re: [qubes-users] Updates, security

2016-12-17 Thread entr0py
johnyju...@sigaint.org: > While updates are signed, so even if they come over the wire in cleartext, > the fact that they often are sent in the clear (even from debian.net) > allows a snooper to know what packages your scanning for metadata or > installing. It reveals a lot about the state of

Re: [qubes-users] Qubes Windows 7 HVM & Windows update

2016-12-17 Thread entr0py
Andrew David Wong: > On 2016-12-17 03:44, Swâmi Petaramesh wrote: >> Hi there, > >> I have attempted several installations of Windows-7 in a HVM (32 or >> 64 bits, with or without Qubes Windows tools for the 64-bit >> version...) and it "basically works", which means that Windows >> starts, I can

Re: Enigmial and Splig GPG2 (previously Re: [qubes-users] Upgrading from Split GPG1 to Split GPG2?)

2016-11-20 Thread entr0py
Marek Marczykowski-Górecki: > On Sat, Nov 19, 2016 at 09:11:21PM -0800, Andrew David Wong wrote: >> On 2016-11-19 03:43, Andrew David Wong wrote: >>> On 2016-11-17 10:05, cubit wrote: 17. Nov 2016 15:33 by dmoer...@gmail.com: >>> > On Wednesday, November 16, 2016 at 10:21:33 PM UTC-5,

Re: Enigmial and Splig GPG2 (previously Re: [qubes-users] Upgrading from Split GPG1 to Split GPG2?)

2016-11-20 Thread entr0py
Marek Marczykowski-Górecki: > On Sat, Nov 19, 2016 at 09:11:21PM -0800, Andrew David Wong wrote: >> On 2016-11-19 03:43, Andrew David Wong wrote: >>> On 2016-11-17 10:05, cubit wrote: 17. Nov 2016 15:33 by dmoer...@gmail.com: >>> > On Wednesday, November 16, 2016 at 10:21:33 PM UTC-5,

Re: [qubes-users] Re: Android-x86 on Qubes

2016-11-19 Thread entr0py
Torsten Grote: > On 11/11/2016 06:01 PM, entr0py wrote: >> Thanks! With that, some progress... Deleting `> bus='xen'/>` from the config file results in usbtablet being >> replaced with ps/2 mouse device. > > I finally got around to try that and it works indeed! > &g

Re: [qubes-users] Replacing Dolphin on Whonix-ws

2016-11-17 Thread entr0py
Sec Tester: > I Really dislike Dolphin. Thumbnail previews dont even seem to work, > and its kinda annoying to use. I'd like to swap it out for something > lite and simple (like the fedora-23 file browser) > > Just wanted to check thats not going to break anything? > > Looking at the package

Re: [qubes-users] Re: Intel TXT advice

2016-11-14 Thread entr0py
entr0py: > taii...@gmx.com: >> On 11/14/2016 03:12 PM, Eric wrote: >>> On Monday, November 14, 2016 at 11:58:32 AM UTC-8, entr0py wrote: >>>> Eric: >>>>> On Sunday, November 13, 2016 at 10:44:33 PM UTC-8, >>>>> tai...@gmx.com wrote: &

Re: [qubes-users] Re: Intel TXT advice

2016-11-14 Thread entr0py
taii...@gmx.com: > On 11/14/2016 03:12 PM, Eric wrote: >> On Monday, November 14, 2016 at 11:58:32 AM UTC-8, entr0py wrote: >>> Eric: >>>> On Sunday, November 13, 2016 at 10:44:33 PM UTC-8, >>>> tai...@gmx.com wrote: >>>>> Forgot to sa

Re: [qubes-users] Re: Intel TXT advice

2016-11-14 Thread entr0py
Eric: > On Sunday, November 13, 2016 at 10:44:33 PM UTC-8, tai...@gmx.com > wrote: >> Forgot to say: Purism is just an overpriced quanta/oem whitebox >> laptop, it takes 5mil+ of startup funds to do a small run of *just >> a motherboard* let alone an entire laptop computer including the >> fab for

Re: [qubes-users] Installing VPN in Qubes Versus VPN on a Router

2016-11-14 Thread entr0py
entr0py: > taii...@gmx.com: >> On 11/13/2016 07:39 PM, entr0py wrote: >>> taii...@gmx.com: >>>> You can use a VMM with a pfsense VM and separate driver domains >>>> for the network interfaces, qubes isn't a router operating >>>> system...

Re: [qubes-users] Re: Intel TXT advice

2016-11-13 Thread entr0py
Eric: > On Tuesday, February 23, 2016 at 1:54:30 AM UTC-8, Marek Marczykowski-Górecki > wrote: >> -BEGIN PGP SIGNED MESSAGE- >> Hash: SHA256 >> >> On Tue, Feb 23, 2016 at 04:11:55AM +, Rusty Bird wrote: >>> marmarek: On Mon, Feb 22, 2016 at 08:52:43PM +, Rusty Bird wrote:

Re: [qubes-users] Installing VPN in Qubes Versus VPN on a Router

2016-11-13 Thread entr0py
taii...@gmx.com: > VT-d is intels marketing term for IOMMU, you can buy an AMD system > that has IOMMU (AMD-Vi) (but not FM2/AM4 as that has PSP). Qubes > needs IOMMU not "VT-d" Thanks for reply. I understood this previously but I'm not familiar with AMD's offerings and didn't realize they had a

Re: [qubes-users] Installing VPN in Qubes Versus VPN on a Router

2016-11-13 Thread entr0py
taii...@gmx.com: > Ideally you would want a blob free coreboot system with no Intel ME or AMD > PSP type backdoors. > https://www.coreboot.org/Binary_situation > Intel is actively trying to nerf free software with Boot Guard/ME, if you buy > a computer with those features it isn't really your

Re: [qubes-users] Re: Genymotion in Qubes

2016-11-12 Thread entr0py
Sec Tester: > pl1...@sigaint.org: >> Good day >> I want to install an android emulator in Qubes and reading some review, >> Genymotion is the best. The issue is that it run in Virtualbox, how can I >> install it in Qubes? >> >> Thanks >> > Nice question. I would also like to know. > > Have you

Re: [qubes-users] Leak Problems with VPN ProxyVM + AirVPN & Network lock

2016-11-11 Thread entr0py
Sec Tester: > On Saturday, 12 November 2016 04:22:37 UTC+10, Chris Laprise wrote: >>> >> >> A tip for stopping DNS leaks with the GUI: You have to run a script like >> 'qubes-setup-dnat-to-ns' (in Qubes) or 'qubes-vpn-handler.sh' (in the >> VPN doc) after the client connects or else DNS packets

Re: [qubes-users] Clean install Windows 7 HVM fails after installing qubes-windows-tools 3.2.2-3

2016-11-11 Thread entr0py
pooosi...@vfemail.net: > 1) Create new HVM with 20Gb disk space and 2Gb RAM, Install Win7. You'll need closer to 40GB if you plan to fully update the OS. > 7) Manually start machine. Machine boots fine, but... nothing happens. > Seamless mode is disabled, but I cant see machine's window

Re: [qubes-users] Re: Android-x86 on Qubes

2016-11-11 Thread entr0py
Marek Marczykowski-Górecki: > On Tue, Nov 08, 2016 at 11:09:37PM -0200, Torsten Grote wrote: >> On 11/07/2016 08:54 PM, 3n7r0...@gmail.com wrote: >>> AFAICT, it's an issue with how QEMU is implemented in Xen. The input >>> device in question is passed via `-usbdevice tablet` instead of being >>>

Re: [qubes-users] Whonix Gateway and normal AppVM behind?

2016-11-03 Thread entr0py
Drew White: > Hi folks, > > If I'm using the Whonix Gateway guest, and I have it as a ProxyVM, is it safe > to assume that if I use a normal AppVM, (non-whonix) behind it, then that > means that everything is still going through the Tor network? > > (Just wanting to make 100% sure) > >

Re: [qubes-users] Can't Install KB3177467 on Windows HVM Template

2016-10-15 Thread entr0py
John Marrett: > I've been running windows template HVMs for some time now and it's working > quite well once you get past the initial patch installation. > > I now have an issue where I can't successfully install the 11/10/2016 > update to KB3177467. After each installation and the required

Re: [qubes-users] Why is whonix-ws necessary?

2016-10-12 Thread entr0py
jkitt: > Wouldn't an appvm, with the tor browser, and netvm set to sys-whonix do the > same thing? > No. You can see which differences are applicable to you here: https://www.whonix.org/wiki/Other_Operating_Systems#Security_Comparison:_Whonix-Download-Workstation_vs._Whonix-Custom-Workstation

Re: [qubes-users] Needed Packages for sys-usb on Fedora-minimal

2016-10-04 Thread entr0py
Fabrizio Romano Genovese: > Hello everyone, > > I have installed the fedora-24-minimal template and I'm loving it. I'm using > it as the underlying template in my Netvm and FirewallVM, I just followed the > guide on Qubes website and everything went well. I'd like to do the same for > my

Re: [qubes-users] Re: Qubes Windows Tools

2016-09-28 Thread entr0py
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 It gives me no pleasure (well...) to gang up on a guy who obviously doesn't have the slightest notion of what it means to possess even a modicum of social grace. But in the absence of a downvote button, how else do you voice your disapproval of a

Re: [qubes-users] I can't disable ipv6 on Debian Template

2016-09-25 Thread entr0py
nishiwak...@gmail.com: > Hello, > > I am surprised that there is no way to disable ipv6 on Debian template. > > I reinstalled first the template using documentation > https://www.qubes-os.org/doc/reinstall-template/ > > Then I added "net.ipv6.conf.all.disable_ipv6 = 1" in /etc/sysctl.conf, I

Re: [qubes-users] Qubes Windows 7 / 10

2016-09-20 Thread entr0py
Pawel Debski: > W dniu niedziela, 18 września 2016 17:21:47 UTC+2 użytkownik ludwig jaffe > napisał: >> On Saturday, September 17, 2016 at 3:55:58 AM UTC-4, Pawel Debski wrote: >>> Folks, >>> >>> I have Qubes 3.2 up, updated & >>> running like a charm. Now the Microsoft challenge.

Re: [qubes-users] Streisand - AntiCensorship software

2016-09-06 Thread entr0py
amadaus: > Hi > Some of you may be interested in setting up your own personal VPN using > streisand software? I first read obout this in Ars Technica [ > http://arstechnica.com/security/2016/06/aiming-for-anonymity-ars-assesses-the-state-of-vpns-in-2016/] > and have since tried it out in a

Re: [qubes-users] [3.2rc2] Pulseaudio 100% CPU load at dom0

2016-09-02 Thread entr0py
David Hobach: > On 08/31/2016 08:14 PM, entr0py wrote: >> Eva Star: >>> 3.2rc2 - clean install (on 3.2rc1 with updates I do not have this >>> problem) >>> >>> At dom0 pulseaudio proccess always eat 100% of CPU. If I kill it, >>> then it st

Re: [qubes-users] [3.2rc2] Pulseaudio 100% CPU load at dom0

2016-08-31 Thread entr0py
Eva Star: > 3.2rc2 - clean install (on 3.2rc1 with updates I do not have this problem) > > At dom0 pulseaudio proccess always eat 100% of CPU. > If I kill it, then it starts again! > Please, help. Hot to fix this issue or how to disable pulseaudio start after > kill. > Had similar symptoms on

Re: [qubes-users] Re: Unable to assign audio device

2016-08-31 Thread entr0py
Adi Carlisle: > OK, update, I reinstalled my Qubes 3.1 but this time I used sys-usb (& > sys-net option) Sound worked on all VM's. > **Didn't get a chance to test it on Win7** because I tested the mute function > now it doesn't work again. > https://www.qubes-os.org/doc/windows-appvms/: >

Re: [qubes-users] Missing config files after Backup / Restore

2016-08-17 Thread entr0py
> On 08/17/2016 03:20 PM, entr0py wrote: >> Just migrated my Qubes 3.1 system to new hardware and it went surprisingly >> smoothly :) >> >> I noticed however that my KDE Window Rules did not get backed up / restored >> (not sure which). >> >> It's

[qubes-users] Missing config files after Backup / Restore

2016-08-17 Thread entr0py
Just migrated my Qubes 3.1 system to new hardware and it went surprisingly smoothly :) I noticed however that my KDE Window Rules did not get backed up / restored (not sure which). It's kind of irrelevant at this point since we're moving away from KDE but I'd still like to know why that

[qubes-users] Unable to Remove Template / Preun: Domain not found

2016-08-17 Thread entr0py
New Qubes 3.1 installation with Advanced (No Configuration) option. After restoring dom0 + serviceVMs + serviceTemplates, tried to `sudo yum remove qubes-template-fedora-23` Received: Error in PREUN scriptlet in rpm package... libvirt.libvirtError: Domain not found [from libvirt.py line 4066

Re: [qubes-users] 3.2rcX Default Display (Login) Manager

2016-08-16 Thread entr0py
entr0py: > donoban: >> On Mon, 15 Aug 2016 12:06:36 -0700 (PDT) >> 3n7r0...@gmail.com wrote: >> >>> I haven't had a chance to try out 3.2rc yet. Can someone please tell >>> me what the default DM is to launch XFCE4? Thanks! >>> >> >&

Re: [qubes-users] 3.2rcX Default Display (Login) Manager

2016-08-16 Thread entr0py
donoban: > On Mon, 15 Aug 2016 12:06:36 -0700 (PDT) > 3n7r0...@gmail.com wrote: > >> I haven't had a chance to try out 3.2rc yet. Can someone please tell >> me what the default DM is to launch XFCE4? Thanks! >> > > > It is the same of Qubes 3.1, lightdm if I'm not wrong. > Thanks. Somewhat

Re: [qubes-users] Bad GPG Signature is Good on 2nd Try?

2016-08-05 Thread entr0py
Andrew David Wong: > On 2016-08-05 16:21, entr0py wrote: >> After downloading Qubes 3.1 iso, I attempted to verify with Release 3 >> Signing Key: > >> user@host:~/Downloads$ gpg --verify Qubes-R3.1-x86_64.iso.asc gpg: assuming >> signed data in `Qubes-R3.1-x86_64.i

Re: [qubes-users] No sound with VoIP

2016-07-30 Thread entr0py
ghbouchard...@gmail.com: > I try to use Tox for having a VoIP software but unfortunately I can > not have any sound. Here is my setup : (I use Qubes 3.2) > Is this a VOIP-issue or do you not have any sound in general? Can you listen to audio files, watch youtube videos, etc? Some things to

Re: [qubes-users] Re: PulseAudio Connection Terminated

2016-07-30 Thread entr0py
Marek Marczykowski-Górecki: > Maybe it is related to HDMI audio output? Try to disable it (for example > unload snd-hda-codec-hdmi kernel module). Thanks Marek! I figured it out this morning but `Replied` to Myself :/ Sorry to waste your time. > On Sat, Jul 30, 2016 at 04:11:50 AM UTC,

[qubes-users] PulseAudio Connection Terminated

2016-07-29 Thread entr0py
On a freshly rebooted Qubes 3.1, dom0 pulseaudio process consumes 100% cpu every 5 secs. Pulseaudio Manager shows a connection to server for a split second before announcing `Failure: Connection terminated`. This cycles continuously. Not sure what triggered this issue. May have been recent

Re: [qubes-users] Re: Networking

2016-07-12 Thread entr0py
Drew White: > On Saturday, 9 July 2016 22:13:30 UTC+10, Marek Marczykowski-Górecki wrote: >> There is no other limit than your hardware. > > If this is true, then please, why is mine only 100 Mbps behind the NetVM when > I have a 1Gbps NIC? > > I have multiple things monitoring the network

Re: [qubes-users] Re: whonix gateway metapackage missing

2016-06-23 Thread entr0py
digitaldi...@tutanota.com: > Turns out whonix still runs, or at least sys-whonix does, I'm in the > process of updating dom0, and arm for sys-whonix is showing plenty of > activity that I couldn't get before(when I was trying to update Whonix-gw > template vm > > On Thursday, June 23, 2016 at

Re: [qubes-users] Adding New Disk Image to VM

2016-06-20 Thread entr0py
Marek Marczykowski-Górecki: > On Mon, Jun 20, 2016 at 06:35:14PM +0000, entr0py wrote: >> 3. add file as disk device to /var/lib/qubes/appvms/myappvm.conf: >> >> >> >> >> > > This config file is regenerated each time t

[qubes-users] Adding New Disk Image to VM

2016-06-20 Thread entr0py
Would appreciate if someone could check that I'm not doing something stupid... (Don't see any docs regarding this.) Use case: I want to store my Documents on a separate .img (on same Qubes SSD) so that only config files remain on my appVM. This should ease the upgrade process when I want to

Re: [qubes-users] Apt attempting to remove packages in whonix-gw

2016-06-13 Thread entr0py
entr0py: > jkitt: >> I'm trying to remove some applications that I don't need (like VLC). >> >> The problem is that apt attempts to remove a number of packages that I'm >> not sure if i need or not - some of the whonix-gw/qubes specific packages >> se

Re: [qubes-users] If using the same Whonix GW, does all Wonix WS get the same "identity"?

2016-06-08 Thread entr0py
Andrew David Wong: > On 2016-06-08 00:14, Albin Otterhäll wrote: >> I'm assuming that if you connect to Tor using the same Whonix >> gateway (e.g. "sys-whonix"), you get the same "identity" (IP, etc.) >> on both your workstations. Is this correct? > > > Not entirely. By default, stream isolation