home.social

#qubes — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #qubes, aggregated by home.social.

  1. #Qubes zerfickt meinen Kopf. Ich hab gerade ernsthaft daeüber nachgedacht, einen Qube, also eine VM, nur für Zeitsynchronisatiom zu erstellen. #qubesos #paranoid #paranoia

  2. SecureDrop Workstation 1.9.0 is now available!

    This release hardens the updater against some edge cases discovered during the 1.8.0 release.

    securedrop.org/news/securedrop

    #OpenSource #Whistleblowing #Qubes

  3. @simontatham I guess now I really need to start giving #Qubes OS a try. I understand it isolates clipboard access as well...

    > "Qubes prevents clipboard hijacking by using a secure, manual key-combination method to copy text or files between isolated virtual machines."

  4. something i came across looking into distributions to replace debian is the stance that qubes takes on secure boot:

    "UEFI Secure Boot is not supported out of the box as UEFI support in Xen is very basic. Arguably secure boot reliance on UEFI integrity is not the best design. [...] See the [Heads project] for a better-designed non-UEFI-based secure boot scheme with very good support for Qubes."

    doc.qubes-os.org/en/latest/int

    alas, i don't think my framework amd laptop (their first-gen amd) supports open firmware...

    #debian #secureboot #qubes

  5. Note to self: how to configure the network manually on #QubesOS AppVM: use qubesdb-read <path> to read these paths /qubes-ip, /qubes-gateway, /qubes-ip6, /qubes-gateway6. If you can't use qubesdb-read because the AppVM has no #Qubes daemons running, you have a bigger problem.

    In systemd-networkd, the usual configuration format is:

    [Match]
    Name=eth0
    [Network]
    Address=<IPv4>
    Gateway=<IPv4>
    Address=<IPv6>
    Gateway=<IPv6>

    But QubesOS AppVMs have IP addresses with /32 or /128 netmasks, I guess it's a basic firewall, so the router is not in the subnet, so systemd-networkd doesn't work. In this case, you need:
    [Network]
    Address=<IPv4>/32
    Address=<IPv6>/128
    [Route]
    Gateway=<IPv4>
    GatewayOnLink=yes
    [Route]
    Gateway=<IPv6>
    GatewayOnLink=yes

  6. does anyone have a link for @micahflee's talk that involved a proof of concept steganographic encrypted OS that hides in the filesystem of another OS? I need it for a blog post I'm writing
    #encryption #steganography #qubes

  7. SecureDrop Workstation 1.8.0 and SecureDrop Inbox 1.5.0 are now available!

    These releases add support for Debian 13 “trixie” and automatically upgrade the underlying VMs.

    securedrop.org/news/securedrop

    #OpenSource #whistleblowing #Debian #Qubes

  8. @christopherkunz

    #ReCaptchas #Privatsphäre

    (1/2)

    Vielen Dank.

    Das wäre fatal.
    Ich bin dabei mich sukzessive von #BigTech-Lösungen zu verabschieden.

    Vllt. kann man bei Bestellungen bei einzelnen Monopolisten (noch?) nicht auf ein Standard-OS wie #Android oder #iOS verzichten (etliche e- und audio-books gibt es ja z. B. nur auf Amazon) --dann vllt. jedoch in einer Burner-VM in #Qubes? 😉

    Für alles andere finden sich letztlich dann FOSS-Alternativen oder Work-arounds (z. B. #ffmpeg und #YT).

  9. Qubes 4.2 is now end-of-life. All SecureDrop Workstation users should be using Qubes 4.3.

    If you have not upgraded, please contact support immediately.

    securedrop.org/news/qubes-4_2-

    #OpenSource #Whistleblowing #Qubes

  10. Various tech things I think the world needed yesterday (so to speak):

    [recently expanded into a bigger article (WIP): https://moses-izumi.neocities.org/TechWeNeededYesterday ]

    - Handheld keyboard with built-in USB-C dock (USB-A, full size HDMI/DP, SD card slot): to hopefully make modern smartphones viable as laptop substitutes

    - Desktop environments that include "view source code" and "open in disassembler"-buttons on every application window and launcher icon
    (surprised that #Gentoo or #guix haven't already tried this: considering that their package managers are already built around compiling software from source.)
    (Would probably be most practical on systems where every application is written in interpreted languages.)

    - Terminal with a context menu where you can find and paste every available command or application, featuring icons and descriptions for all of them
    (basically anything that would make command line tools more discoverable)

    - clone of Itch[dot]io that only serves FOSS videogames
    (I also think it'd be neat if more FOSS games shipped level editors)

    - Loss32, @hikari's effort to turn Wine into the primary GUI of a Linux system.
    (most of the convenience features and configuration knobs that Wine launchers like Q4Wine or Lutris offer would be more useful if they were implemented as part of a desktop environment: and using a spruced-up version of WineDesktop to that end is a reasonable approach)

    (I have mixed feelings about the Windows software ecosystem and the website's "Win32 is the stable Linux ABI"-rhetoric: but being able to use it on a non-Microsoft platform with minimal hassle is pretty important step towards dissolving their chokehold on personal computing)

    (All things considered I'm kinda shocked that this hasn't already been attempted by some rogue #LibreOffice, SteamOS or #Qubes contributor.)

    - Gentoo-style package manager for Windows and MacOS: to promote the advantages of building software from source even in the darkest corners of the proprietary world
    (i dunno this one probably already exists)

    - Phone that uses a 2.5 inch SATA SSD as it's primary form of storage
    (if it had a particularily good camera, certain types of indie filmmakers would probably have a field day with it)

    #FOSS
  11. The @QubesOS folks are running a survey to ask people how to improve Qubes OS. If you have opinions - rare on the Fediverse, I know - then they'd like to hear from you.

    #Linux #Qubes

    qubes-os.org/news/2026/06/11/q

  12. Wyng Backup 🐦 v0.8.1 is out and available for download! codeberg.org/tasket/wyng-backup

    Changes from v0.8.0 include bug fixes, faster data seeking over unallocated space, expanded archive repair capabilities and improved error handling.

    Development is also progressing toward v0.9, with alpha2 now available for testing. Alpha versions are now named 'wyng09a' so they aren't accidentally run instead of stable releases. These versions also require '--test-write-v3' option before writing to archives created by Wyng stable.
    #wyng #backup #release #lvm #btrfs #linux #qubes

  13. SecureDrop Workstation 1.6.2, for Qubes 4.2, and 1.7.1, for Qubes 4.3, are now available!

    These releases remove the legacy SecureDrop Client and enable an upgrade script to make preparing for the Qubes 4.3 upgrade simpler.

    securedrop.org/news/securedrop

    #OpenSource #Whistleblowing #Electron #Qubes

  14. SecureDrop Inbox 1.3.1 is now available!

    This release fixes a low-priority security issue in the securedrop-proxy component.

    securedrop.org/news/securedrop

    #OpenSource #Whistleblowing #Electron #Qubes

  15. SecureDrop Workstation 1.6.1 is now available, allowing administrators to begin the process of upgrading to Qubes 4.3.

    securedrop.org/news/workstatio

    #OpenSource #Whistleblowing #Qubes

  16. SecureDrop Inbox 1.3.0 is now available!

    This release adds a label to show the number of selected sources, disables downloading of files in offline mode, and updates a number of dependencies.

    securedrop.org/news/securedrop

    #OpenSource #Whistleblowing #Electron #Qubes

  17. SecureDrop Workstation 1.7.0 has been released!

    This is a Qubes 4.3-only release, and takes advantage of some of its new features to provide a more robust and secure way for journalists to review submissions.

    securedrop.org/news/securedrop

    #OpenSource #Whistleblowing #Qubes

  18. SecureDrop Inbox 1.2.0 is now available! This release increases the number of results returned by search, improves file handling and sync performance, and carries out other internal cleanup.

    securedrop.org/news/securedrop

    #OpenSource #Whistleblowing #Electron #Qubes

  19. SecureDrop Inbox 1.1.0 is now available!

    This version fixes a number of small issues that didn’t make it into the previous release.

    securedrop.org/news/securedrop

    #OpenSource #Whistleblowing #Electron #Qubes

  20. The inaugural release of SecureDrop Inbox is now available! 🎉

    The Inbox is a full rewrite of our client, and includes many new features and performance improvements for journalists.

    securedrop.org/news/securedrop

    #OpenSource #Whistleblowing #Electron #Qubes