#qubes — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #qubes, aggregated by home.social.
-
This Week in Security: Baked-in Malware, Freezers Not Freezing, Zoom Snoops Clipboards, and AI Makes Things Worse, Faster
-
This Week in Security: Baked-in Malware, Freezers Not Freezing, Zoom Snoops Clipboards, and AI Makes Things Worse, Faster
-
SecureDrop Workstation 1.9.0 is now available!
This release hardens the updater against some edge cases discovered during the 1.8.0 release.
https://securedrop.org/news/securedrop-workstation-1_9_0-released/
-
@simontatham I guess now I really need to start giving #Qubes OS a try. I understand it isolates clipboard access as well...
> "Qubes prevents clipboard hijacking by using a secure, manual key-combination method to copy text or files between isolated virtual machines."
-
something i came across looking into distributions to replace debian is the stance that qubes takes on secure boot:
"UEFI Secure Boot is not supported out of the box as UEFI support in Xen is very basic. Arguably secure boot reliance on UEFI integrity is not the best design. [...] See the [Heads project] for a better-designed non-UEFI-based secure boot scheme with very good support for Qubes."
https://doc.qubes-os.org/en/latest/introduction/faq.html#is-secure-boot-supported
alas, i don't think my framework amd laptop (their first-gen amd) supports open firmware...
-
Note to self: how to configure the network manually on #QubesOS AppVM: use
qubesdb-read <path>to read these paths/qubes-ip,/qubes-gateway,/qubes-ip6,/qubes-gateway6. If you can't usequbesdb-readbecause the AppVM has no #Qubes daemons running, you have a bigger problem.
In systemd-networkd, the usual configuration format is:[Match] Name=eth0 [Network] Address=<IPv4> Gateway=<IPv4> Address=<IPv6> Gateway=<IPv6>
But QubesOS AppVMs have IP addresses with /32 or /128 netmasks, I guess it's a basic firewall, so the router is not in the subnet, so systemd-networkd doesn't work. In this case, you need:[Network] Address=<IPv4>/32 Address=<IPv6>/128 [Route] Gateway=<IPv4> GatewayOnLink=yes [Route] Gateway=<IPv6> GatewayOnLink=yes -
does anyone have a link for @micahflee's talk that involved a proof of concept steganographic encrypted OS that hides in the filesystem of another OS? I need it for a blog post I'm writing
#encryption #steganography #qubes -
-
SecureDrop Workstation 1.8.0 and SecureDrop Inbox 1.5.0 are now available!
These releases add support for Debian 13 “trixie” and automatically upgrade the underlying VMs.
https://securedrop.org/news/securedrop-workstation-1_8_0-released/
-
(1/2)
Vielen Dank.
Das wäre fatal.
Ich bin dabei mich sukzessive von #BigTech-Lösungen zu verabschieden.Vllt. kann man bei Bestellungen bei einzelnen Monopolisten (noch?) nicht auf ein Standard-OS wie #Android oder #iOS verzichten (etliche e- und audio-books gibt es ja z. B. nur auf Amazon) --dann vllt. jedoch in einer Burner-VM in #Qubes? 😉
Für alles andere finden sich letztlich dann FOSS-Alternativen oder Work-arounds (z. B. #ffmpeg und #YT).
-
-
Qubes 4.2 is now end-of-life. All SecureDrop Workstation users should be using Qubes 4.3.
If you have not upgraded, please contact support immediately.
-
Various tech things I think the world needed yesterday (so to speak):
[recently expanded into a bigger article (WIP): https://moses-izumi.neocities.org/TechWeNeededYesterday ]
- Handheld keyboard with built-in USB-C dock (USB-A, full size HDMI/DP, SD card slot): to hopefully make modern smartphones viable as laptop substitutes
- Desktop environments that include "view source code" and "open in disassembler"-buttons on every application window and launcher icon
(surprised that #Gentoo or #guix haven't already tried this: considering that their package managers are already built around compiling software from source.)
(Would probably be most practical on systems where every application is written in interpreted languages.)
- Terminal with a context menu where you can find and paste every available command or application, featuring icons and descriptions for all of them
(basically anything that would make command line tools more discoverable)
- clone of Itch[dot]io that only serves FOSS videogames
(I also think it'd be neat if more FOSS games shipped level editors)
- Loss32, @hikari's effort to turn Wine into the primary GUI of a Linux system.
(most of the convenience features and configuration knobs that Wine launchers like Q4Wine or Lutris offer would be more useful if they were implemented as part of a desktop environment: and using a spruced-up version of WineDesktop to that end is a reasonable approach)
(I have mixed feelings about the Windows software ecosystem and the website's "Win32 is the stable Linux ABI"-rhetoric: but being able to use it on a non-Microsoft platform with minimal hassle is pretty important step towards dissolving their chokehold on personal computing)
(All things considered I'm kinda shocked that this hasn't already been attempted by some rogue #LibreOffice, SteamOS or #Qubes contributor.)
- Gentoo-style package manager for Windows and MacOS: to promote the advantages of building software from source even in the darkest corners of the proprietary world
(i dunno this one probably already exists)
- Phone that uses a 2.5 inch SATA SSD as it's primary form of storage
(if it had a particularily good camera, certain types of indie filmmakers would probably have a field day with it)
#FOSS -
The @QubesOS folks are running a survey to ask people how to improve Qubes OS. If you have opinions - rare on the Fediverse, I know - then they'd like to hear from you.
https://www.qubes-os.org/news/2026/06/11/qubes-os-user-survey-2026/
-
You already use #I2P? Great! But did you ever wished to have a separate gateway VM such as in #Whonix?
Works on #Qubes and #KVM:
https://forum.qubes-os.org/t/easy-sys-i2p/41997
https://github.com/kn0sys/i2nix/tree/main -
Wyng Backup 🐦 v0.8.1 is out and available for download! https://codeberg.org/tasket/wyng-backup
Changes from v0.8.0 include bug fixes, faster data seeking over unallocated space, expanded archive repair capabilities and improved error handling.
Development is also progressing toward v0.9, with alpha2 now available for testing. Alpha versions are now named 'wyng09a' so they aren't accidentally run instead of stable releases. These versions also require '--test-write-v3' option before writing to archives created by Wyng stable.
#wyng #backup #release #lvm #btrfs #linux #qubes -
SecureDrop Workstation 1.6.2, for Qubes 4.2, and 1.7.1, for Qubes 4.3, are now available!
These releases remove the legacy SecureDrop Client and enable an upgrade script to make preparing for the Qubes 4.3 upgrade simpler.
https://securedrop.org/news/securedrop-workstation-1_6_2-and-1_7_1-released
-
SecureDrop Inbox 1.3.1 is now available!
This release fixes a low-priority security issue in the securedrop-proxy component.
-
SecureDrop Client, which has been replaced by SecureDrop Inbox, is now end-of-life.
https://securedrop.org/news/securedrop-client-is-end-of-life/
-
SecureDrop Workstation 1.6.1 is now available, allowing administrators to begin the process of upgrading to Qubes 4.3.
https://securedrop.org/news/workstation-qubes-4_3-upgrade-available/
-
SecureDrop Inbox 1.3.0 is now available!
This release adds a label to show the number of selected sources, disables downloading of files in offline mode, and updates a number of dependencies.
-
SecureDrop Workstation 1.7.0 has been released!
This is a Qubes 4.3-only release, and takes advantage of some of its new features to provide a more robust and secure way for journalists to review submissions.
https://securedrop.org/news/securedrop-workstation-1_7_0-released
-
SecureDrop Inbox 1.2.0 is now available! This release increases the number of results returned by search, improves file handling and sync performance, and carries out other internal cleanup.
-
SecureDrop Inbox 1.1.0 is now available!
This version fixes a number of small issues that didn’t make it into the previous release.
-
The inaugural release of SecureDrop Inbox is now available! 🎉
The Inbox is a full rewrite of our client, and includes many new features and performance improvements for journalists.
