Re: [qubes-users] wifi password storage

2018-09-13 Thread Stuart Perkins
On Wed, 12 Sep 2018 22:16:01 - "awokd" wrote: >On Wed, September 12, 2018 8:39 pm, Chris Laprise wrote: > >> Another alternative would be to configure a single sys-net with either >> dispVM or Qubes-VM-hardening so that neither passwords nor malware would be >> retained when sys-net is rest

Re: [qubes-users] wifi password storage

2018-09-12 Thread 'awokd' via qubes-users
On Wed, September 12, 2018 8:39 pm, Chris Laprise wrote: > Another alternative would be to configure a single sys-net with either > dispVM or Qubes-VM-hardening so that neither passwords nor malware would be > retained when sys-net is restarted. Was going to suggest a dispVM as well, per https://

Re: [qubes-users] wifi password storage

2018-09-12 Thread Chris Laprise
On 09/12/2018 03:44 PM, Stuart Perkins wrote: I would do this without a separate network device. Create a clone of a clean (no saved passwords) sys-net. First set sys-net and sys-firewall to NOT autostart. Starting an appVM which uses them will start them first anyway. Create a shutdown scr

Re: [qubes-users] wifi password storage

2018-09-12 Thread daniel
Thank you very much Stuart. This feels like it is clearly the solution for now. So marking as complete even though I haven't actually implemented it yet. Impressed not only by qubes itself but also the help two strangers have offered. Though it may be just a noob opinion, it seems like a rea

Re: [qubes-users] wifi password storage

2018-09-12 Thread Stuart Perkins
I would do this without a separate network device. Create a clone of a clean (no saved passwords) sys-net. First set sys-net and sys-firewall to NOT autostart. Starting an appVM which uses them will start them first anyway. Create a shutdown script which... stop all appVMs stop sys-firewal

Re: [qubes-users] wifi password storage

2018-09-12 Thread daniel
Thank you for your advice and quick reply, Alex. My question isn't just abstract security paranoia. Most wifi passwords don't really matter. But my university in its wisdom uses a one-per-user username/password combo for *everything*. So someone who gets my work wifi password can also change st

Re: [qubes-users] wifi password storage

2018-09-12 Thread Alex
On 9/12/18 6:53 PM, Daniel Allcock wrote: > Dear All, > > Have been settling into my new qubes laptop and found that sys-net keeps my > wifi password in plaintext in a file in a single directory > (/rw/config/NM-system-connections) that survives reboot. Presumably as I > add wifi networks such fi

[qubes-users] wifi password storage

2018-09-12 Thread Daniel Allcock
Dear All, Have been settling into my new qubes laptop and found that sys-net keeps my wifi password in plaintext in a file in a single directory (/rw/config/NM-system-connections) that survives reboot. Presumably as I add wifi networks such files will accumulate. This surprised me, since sys-ne