#qubesos — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #qubesos, aggregated by home.social.
-
dropQbsd in three habits - how BSD compartmentalization without virtualization works
Habit 1 — Never save anything in /home/user. Your files live in userdoc, where the browser cannot reach them.
Habit 2 — Browser and mail in their own domains. The browser browses. The mail handles mail. The firewall enforces the rest.
Habit 3 — Three commands to move files between domains: qcp, qmv, qimport. Permissions enforced automatically. Quarantine with an explanation if something goes wrong.
https://gnulinux.tube/w/aymeWDMEZMbk2YQMqnMm93
#dropQbsd #openBSD #freebsd #netbsd #bsd #qubesOS #openSource #cybersecurity
-
dropQbsd porting from OpenBSD to FreeBSD almost complete: testing phase now. Same scripts run on both systems. mksh adopted for full BSD portability. Next challenge: include NextBSD.
The philosophy stays the same: few lines of code, no virtualization, dead-simple configuration. Compartmentalization without virtualization, built on BSD primitives. Most threat models, minimal attack surface.
https://git.sr.ht/~nobraininside/dropQbsd
#dropQbsd #openBSD #freebsd #netbsd #bsd #qubesOS #openSource #cybersecurity
-
@rstockm @freakshow Zu den Schritten mit Linux: Ich glaube, dass Frustration vorprogrammiert ist, wenn man versucht Arbeits- und Konfigurationsabläufe 1:1 zu übernehmen. Klickibunti ist auf Linux meist schwächer als auf dem Mac, genauso wie Support für AirPlay etc. Dafür wird alte Hardware unterstützt & Automatisierung, Sicherheit und Virtualisierung sind besser ( #qubesos). Der größte Unterschied sind die fehlenden Indydeveloper von Pro Nischensoftware wie Devonthink, Tinderbox, Scrivener.
-
Ah yes, because every OS just needs a little touch of "arbitrary" code execution to spice up its security bulletin! 🍜🔒 Meanwhile, #QubesOS engineers are apparently playing their own version of Russian Roulette with error reporting backchannels. 🤦♂️💻 But hey, at least they remembered their cryptographic signatures, right? 🎉🔑
https://www.qubes-os.org/news/2026/08/29/qsb-118/ #arbitraryCodeExecution #securityBulletin #cryptographicSignatures #errorReporting #techHumor #HackerNews #ngated -
Arbitrary code execution in QubesOS via copy-to-VM error reporting backchannel
https://www.qubes-os.org/news/2026/08/29/qsb-118/
Comments: https://news.ycombinator.com/item?id=49496918
#HackerNews #QubesOS #ArbitraryCodeExecution #Cybersecurity #Vulnerability #VMErrorReporting #SecurityNews
-
🔐 Want to install @QubesOS
Our new tutorial walks you through the Qubes OS installation process step by step.
From starting the installer to getting Qubes OS up and running. 🐧🛡️
-
Dear Qubes OS Berlin users! 🚀
Qubes OS meetup is taking a short summer break this month! 🌄
Enjoy the rest of your Berlin summer 🌞
and see you all in September for more Qubes OS adventures! <3
-
Note to self: how to configure the network manually on #QubesOS AppVM: use
qubesdb-read <path>to read these paths/qubes-ip,/qubes-gateway,/qubes-ip6,/qubes-gateway6. If you can't usequbesdb-readbecause the AppVM has no #Qubes daemons running, you have a bigger problem.
In systemd-networkd, the usual configuration format is:[Match] Name=eth0 [Network] Address=<IPv4> Gateway=<IPv4> Address=<IPv6> Gateway=<IPv6>
But QubesOS AppVMs have IP addresses with /32 or /128 netmasks, I guess it's a basic firewall, so the router is not in the subnet, so systemd-networkd doesn't work. In this case, you need:[Network] Address=<IPv4>/32 Address=<IPv6>/128 [Route] Gateway=<IPv4> GatewayOnLink=yes [Route] Gateway=<IPv6> GatewayOnLink=yes -
#RicochetRefresh and #Arti build on #Fedora Atomic #OS.
#rustlang environment is also functional in #rpm #ostree.
(#immutability over sandboxing if not live?)
#FreedomOfThePress #Journalism #ComputerScience #Linux @freedomofpress @torprojectjk, Rotational #HDD and #Rust work together just fine.
Anomalies and vulns in #QubesOS . . .
#console #hacking #rpc #Wayland #fastly @rustForeign Sources as attack vector
http://www.dds6qkxpwdeubwucdiaord2xgbbeyds25rbsgr73tbfpqpt4a6vjwsyd.onion/wiki/Install_Software#Foreign_Sources
also → APT::KashGrow “true”;What other flaws might lie in confidential computing core trust mechanisms?
https://www.theregister.com/security/2026/07/04/confidential-computings-trust-mechanism-is-broken-the-fix-may-not-exist/5266056
@QubesOS @whonix
#attestation #TLS
@rfceditor #GOSalso, in case you didn't know,
rpm-ostree kargs --append=
is really great
and rpm-ostress works over torsocks, atomic just doesn't like systemd so run 'tor' manually -
🎩🧐 Behold! A riveting "analysis" of Qubes OS Security Bulletins—a thrilling read! Spoiler: It's like counting sheep, but with more acronyms and fewer dreams. 📄🔍
https://arxiv.org/abs/2607.14587 #QubesOS #SecurityAnalysis #TechInsights #CyberSecurity #ReadingRecommendations #HackerNews #ngated -
Qubes OS Security in the Public Record
https://arxiv.org/abs/2607.14587
Comments: https://news.ycombinator.com/item?id=48956307
#HackerNews #QubesOS #Security #PublicRecord #Cybersecurity #OpenSource #Privacy
-
RE: https://infosec.exchange/@infoseclogger/116869832294030304
#qubesos is out. Both attempts it crashes on the Setup Networking part of the configuration. It’s such a private OS I can’t use it. On to something else.
-
#linux reclamation box 9 underway. MacBook I got 10 years ago getting #qubesos installed as I type. I need to experiment with a desktop that isn’t Cosmic.
In other news Steam on Linux won’t properly map buttons for Xbox style or switch style controllers, even if it reads them properly. Having to map buttons per game is an annoyance. I don’t want to buy a PS style controller - especially with recent Sony news - but I need to figure out why the mapping is gorked.
-
📖 The Hitchhiker's Guide to Online Anonymity - v1.2.5
What's new:
→ Comprehensive Whonix 18.x update (upgrade paths, Qubes R4.3+ compatibility, AppArmor guidance)
→ VirtualBox hardening refreshed (Spectre/Meltdown mitigations, network time desync)
→ All Whonix.org wiki links now have Archive.org mirror backups
→ 196 Wikipedia reference links updated throughout
→ PGP keyring now available directly from the site
→ License updated to CC BY-SA 4.0GitHub: https://github.com/Anon-Planet/thgtoa/releases/tag/v1.2.5
Verify: https://anonymousplanet.net/verify/ -
📖 The Hitchhiker's Guide to Online Anonymity - v1.2.5
What's new:
→ Comprehensive Whonix 18.x update (upgrade paths, Qubes R4.3+ compatibility, AppArmor guidance)
→ VirtualBox hardening refreshed (Spectre/Meltdown mitigations, network time desync)
→ All Whonix.org wiki links now have Archive.org mirror backups
→ 196 Wikipedia reference links updated throughout
→ PGP keyring now available directly from the site
→ License updated to CC BY-SA 4.0GitHub: https://github.com/Anon-Planet/thgtoa/releases/tag/v1.2.5
Verify: https://anonymousplanet.net/verify/ -
Dear Qubes OS Berlin users! 🚀
Now for the upcoming part 😎: Join us Friday, June 26, 6-8pm at @xHain_hackspace for another awesome meetup!
Come enjoy a relaxed and welcoming evening with fellow Qubes enthusiasts with friendly discussions about Qubes OS topics & casual networking with like-minded community members.
Snacks provided (and great company guaranteed!)
All creatures welcome!
-
What is Heads firmware!?
Check it out 👉 https://novacustom.com/knowledge-base/what-is-heads-firmware/
-
This week's Linux and FOSS news:
LINUX NEWS
Colorado and California age verification bills exempt open source operating systems:
https://www.gamingonlinux.com/2026/05/colorado-and-california-age-verification-bills-exempt-open-source-operating-systems/
(Good to see some win in this front, although other laws like the US federal law and the Brazilian one don't exclude FOSS so the problem still exists)
(Also, as Switched to Linux pointed out in his video, the Colorado bill is still a bit vague regarding whether restrictive copyleft licenses like GPL are excluded: https://odysee.com/@switchedtolinux:0/bill-passed-foss-carve-out-in-colorado:f)System76 changed their stance, won't include any age attestation/verification in Pop!_OS and COSMIC:
https://system76.com/blog/post/co-and-ca-exempt-open-source-from-age-attestationKDE Plasma 6.7 Beta 2 Brings Union Theming and Quiet Bug Fixes to Linux Desktops:
https://www.linuxcompatible.org/story/kde-plasma-67-beta-2-released/AppGrid 1.8 Native App Launcher for KDE Plasma 6 Is Out with New Features:
https://9to5linux.com/appgrid-1-8-native-app-launcher-for-kde-plasma-6-is-out-with-new-featuresSway 1.12 Wayland Compositor Released with HDR10 Support via Vulkan Renderer:
https://9to5linux.com/sway-1-12-wayland-compositor-released-with-hdr10-support-via-vulkan-rendererLabwc 0.20 Wayland Compositor Released with wlroots 0.20 Support:
https://linuxiac.com/labwc-0-20-wayland-compositor-released-with-wlroots-0-20-support/Ubuntu 26.10 daily builds now available to download:
https://www.omgubuntu.co.uk/2026/05/ubuntu-26-10-daily-buildsManjaro 26.1 Preview Brings GNOME 50, Plasma 6.6, and Kernel 7.0 to Your Desk:
https://www.linuxcompatible.org/story/manjaro-linux-261-bianmay-preview-4-released/NixOS 26.05 “Yarara” Released with GNOME 50, systemd by Default for Stage 1:
https://9to5linux.com/nixos-26-05-yarara-officially-released-with-gnome-50-systemd-by-defaultMX Linux 25.2 Brings Kernel Patches, Text Mode Installer, and Better Live Persistence:
https://www.linuxcompatible.org/story/mx-linux-252-released/Rhino Linux 2026.1 snapshot brings Lomiri desktop to x86_64 and ARM64:
https://alternativeto.net/news/2026/5/rhino-linux-2026-1-snapshot-brings-lomiri-desktop-to-x86_64-and-arm64/Armbian 26.5 Released with Linux 7.0, Ubuntu 26.04 LTS Builds, and More:
https://9to5linux.com/armbian-26-5-released-with-linux-7-0-ubuntu-26-04-lts-builds-and-moreQubes OS 4.3.1 Release Candidate Brings Fedora 43 and Critical Security Patches:
https://www.linuxcompatible.org/story/qubes-os-431-rc1-released/(more Linux and FOSS news in comments)
#WeeklyNews #News #Linux #LinuxNews #AgeAttestation #AgeVerification #AgeVerificationLaw #KDE #KDEPlasma #AppGrid #Sway #Labwc #Ubuntu #Manjaro #NixOS #MXLinux #RhinoLinux #Armbian #QubesOS #DistroRelease #DesktopEnvironment #DistributionRelease #LinuxDesktop #DesktopLinux #FosseryTech
-
Dear Qubes OS Berlin users! 🌞
Join us Friday, May 29, 6-8pm at @xHain_hackspace!
Following last month's impromptu session (huge thanks to Ben!), there will be another hands-on dev session! 💻
Check out these beginner-friendly issues to begin your contribution journey 🚀 :
Or just come chat about:
- Qubes OS intro/installation
- & <Your topic of interest>!Snacks and great company guaranteed!
All creatures welcome! <3