#qubesos — Public Fediverse posts

dropQbsd in three habits - how BSD compartmentalization without virtualization works

Habit 1 — Never save anything in /home/user. Your files live in userdoc, where the browser cannot reach them.

Habit 2 — Browser and mail in their own domains. The browser browses. The mail handles mail. The firewall enforces the rest.

Habit 3 — Three commands to move files between domains: qcp, qmv, qimport. Permissions enforced automatically. Quarantine with an explanation if something goes wrong.

https://gnulinux.tube/w/aymeWDMEZMbk2YQMqnMm93

#dropQbsd #openBSD #freebsd #netbsd #bsd #qubesOS #openSource #cybersecurity

#Qubes zerfickt meinen Kopf. Ich hab gerade ernsthaft daeüber nachgedacht, einen Qube, also eine VM, nur für Zeitsynchronisatiom zu erstellen. #qubesos #paranoid #paranoia

dropQbsd porting from OpenBSD to FreeBSD almost complete: testing phase now. Same scripts run on both systems. mksh adopted for full BSD portability. Next challenge: include NextBSD.

The philosophy stays the same: few lines of code, no virtualization, dead-simple configuration. Compartmentalization without virtualization, built on BSD primitives. Most threat models, minimal attack surface.

https://git.sr.ht/~nobraininside/dropQbsd

#dropQbsd #openBSD #freebsd #netbsd #bsd #qubesOS #openSource #cybersecurity

CVE-2026-82636 - OS Command Injection in Qubes OS via qvm-copy-to-vm error handling. CVSS 7.9. Update qubes-core-dom0-linux immediately. #CVE #QubesOS #infosec

https://www.valtersit.com/cve/CVE-2026-82636/

@rstockm @freakshow Zu den Schritten mit Linux: Ich glaube, dass Frustration vorprogrammiert ist, wenn man versucht Arbeits- und Konfigurationsabläufe 1:1 zu übernehmen. Klickibunti ist auf Linux meist schwächer als auf dem Mac, genauso wie Support für AirPlay etc. Dafür wird alte Hardware unterstützt & Automatisierung, Sicherheit und Virtualisierung sind besser ( #qubesos). Der größte Unterschied sind die fehlenden Indydeveloper von Pro Nischensoftware wie Devonthink, Tinderbox, Scrivener.

Ah yes, because every OS just needs a little touch of "arbitrary" code execution to spice up its security bulletin! 🍜🔒 Meanwhile, #QubesOS engineers are apparently playing their own version of Russian Roulette with error reporting backchannels. 🤦‍♂️💻 But hey, at least they remembered their cryptographic signatures, right? 🎉🔑
https://www.qubes-os.org/news/2026/08/29/qsb-118/ #arbitraryCodeExecution #securityBulletin #cryptographicSignatures #errorReporting #techHumor #HackerNews #ngated

Arbitrary code execution in QubesOS via copy-to-VM error reporting backchannel

https://www.qubes-os.org/news/2026/08/29/qsb-118/

Comments: https://news.ycombinator.com/item?id=49496918

#HackerNews #QubesOS #ArbitraryCodeExecution #Cybersecurity #Vulnerability #VMErrorReporting #SecurityNews

🔐 Want to install @QubesOS

Our new tutorial walks you through the Qubes OS installation process step by step.

From starting the installer to getting Qubes OS up and running. 🐧🛡️

#QubesOS #Linux #OpenSource #Privacy #CyberSecurity

Dear Qubes OS Berlin users! 🚀

Qubes OS meetup is taking a short summer break this month! 🌄

Enjoy the rest of your Berlin summer 🌞

and see you all in September for more Qubes OS adventures! <3

#qubesos #meetup #berlin

https://github.com/nobraininside/dropQbsd
https://github.com/BawdyAnarchist/quBSD
#openbsd #qubesos #bsd #qubes

Note to self: how to configure the network manually on #QubesOS AppVM: use qubesdb-read <path> to read these paths /qubes-ip, /qubes-gateway, /qubes-ip6, /qubes-gateway6. If you can't use qubesdb-read because the AppVM has no #Qubes daemons running, you have a bigger problem.

In systemd-networkd, the usual configuration format is:

[Match]
Name=eth0
[Network]
Address=<IPv4>
Gateway=<IPv4>
Address=<IPv6>
Gateway=<IPv6>

[Network]
Address=<IPv4>/32
Address=<IPv6>/128
[Route]
Gateway=<IPv4>
GatewayOnLink=yes
[Route]
Gateway=<IPv6>
GatewayOnLink=yes

#RicochetRefresh and #Arti build on #Fedora Atomic #OS.
#rustlang environment is also functional in #rpm #ostree.
(#immutability over sandboxing if not live?)
#FreedomOfThePress #Journalism #ComputerScience #Linux @freedomofpress @torproject

jk, Rotational #HDD and #Rust work together just fine.
Anomalies and vulns in #QubesOS . . .
#console #hacking #rpc #Wayland #fastly @rust

Foreign Sources as attack vector
http://www.dds6qkxpwdeubwucdiaord2xgbbeyds25rbsgr73tbfpqpt4a6vjwsyd.onion/wiki/Install_Software#Foreign_Sources
also → APT::KashGrow “true”;

What other flaws might lie in confidential computing core trust mechanisms?
https://www.theregister.com/security/2026/07/04/confidential-computings-trust-mechanism-is-broken-the-fix-may-not-exist/5266056
@QubesOS @whonix
#attestation #TLS
@rfceditor #GOS

also, in case you didn't know,
rpm-ostree kargs --append=
is really great
and rpm-ostress works over torsocks, atomic just doesn't like systemd so run 'tor' manually

#Karg #Kernel

🎩🧐 Behold! A riveting "analysis" of Qubes OS Security Bulletins—a thrilling read! Spoiler: It's like counting sheep, but with more acronyms and fewer dreams. 📄🔍
https://arxiv.org/abs/2607.14587 #QubesOS #SecurityAnalysis #TechInsights #CyberSecurity #ReadingRecommendations #HackerNews #ngated

Qubes OS Security in the Public Record

https://arxiv.org/abs/2607.14587

Comments: https://news.ycombinator.com/item?id=48956307

#HackerNews #QubesOS #Security #PublicRecord #Cybersecurity #OpenSource #Privacy

RE: https://infosec.exchange/@infoseclogger/116869832294030304

#qubesos is out. Both attempts it crashes on the Setup Networking part of the configuration. It’s such a private OS I can’t use it. On to something else.

#linux

#linux reclamation box 9 underway. MacBook I got 10 years ago getting #qubesos installed as I type. I need to experiment with a desktop that isn’t Cosmic.

In other news Steam on Linux won’t properly map buttons for Xbox style or switch style controllers, even if it reads them properly. Having to map buttons per game is an annoyance. I don’t want to buy a PS style controller - especially with recent Sony news - but I need to figure out why the mapping is gorked.

📖 The Hitchhiker's Guide to Online Anonymity - v1.2.5

What's new:

→ Comprehensive Whonix 18.x update (upgrade paths, Qubes R4.3+ compatibility, AppArmor guidance)
→ VirtualBox hardening refreshed (Spectre/Meltdown mitigations, network time desync)
→ All Whonix.org wiki links now have Archive.org mirror backups
→ 196 Wikipedia reference links updated throughout
→ PGP keyring now available directly from the site
→ License updated to CC BY-SA 4.0

GitHub: https://github.com/Anon-Planet/thgtoa/releases/tag/v1.2.5
Verify: https://anonymousplanet.net/verify/

#privacy #anonymity #opsec #infosec #Whonix #QubesOS #FOSS

📖 The Hitchhiker's Guide to Online Anonymity - v1.2.5

What's new:

→ Comprehensive Whonix 18.x update (upgrade paths, Qubes R4.3+ compatibility, AppArmor guidance)
→ VirtualBox hardening refreshed (Spectre/Meltdown mitigations, network time desync)
→ All Whonix.org wiki links now have Archive.org mirror backups
→ 196 Wikipedia reference links updated throughout
→ PGP keyring now available directly from the site
→ License updated to CC BY-SA 4.0

GitHub: https://github.com/Anon-Planet/thgtoa/releases/tag/v1.2.5
Verify: https://anonymousplanet.net/verify/

#privacy #anonymity #opsec #infosec #Whonix #QubesOS #FOSS

Dear Qubes OS Berlin users! 🚀

Now for the upcoming part 😎: Join us Friday, June 26, 6-8pm at @xHain_hackspace for another awesome meetup!

Come enjoy a relaxed and welcoming evening with fellow Qubes enthusiasts with friendly discussions about Qubes OS topics & casual networking with like-minded community members.

Snacks provided (and great company guaranteed!)

All creatures welcome!

#qubesos #meetup #berlin #xhain

What is Heads firmware!?

Check it out 👉 https://novacustom.com/knowledge-base/what-is-heads-firmware/

#QubesOS

This week's Linux and FOSS news:

LINUX NEWS

Colorado and California age verification bills exempt open source operating systems:
https://www.gamingonlinux.com/2026/05/colorado-and-california-age-verification-bills-exempt-open-source-operating-systems/
(Good to see some win in this front, although other laws like the US federal law and the Brazilian one don't exclude FOSS so the problem still exists)
(Also, as Switched to Linux pointed out in his video, the Colorado bill is still a bit vague regarding whether restrictive copyleft licenses like GPL are excluded: https://odysee.com/@switchedtolinux:0/bill-passed-foss-carve-out-in-colorado:f)

System76 changed their stance, won't include any age attestation/verification in Pop!_OS and COSMIC:
https://system76.com/blog/post/co-and-ca-exempt-open-source-from-age-attestation

KDE Plasma 6.7 Beta 2 Brings Union Theming and Quiet Bug Fixes to Linux Desktops:
https://www.linuxcompatible.org/story/kde-plasma-67-beta-2-released/

AppGrid 1.8 Native App Launcher for KDE Plasma 6 Is Out with New Features:
https://9to5linux.com/appgrid-1-8-native-app-launcher-for-kde-plasma-6-is-out-with-new-features

Sway 1.12 Wayland Compositor Released with HDR10 Support via Vulkan Renderer:
https://9to5linux.com/sway-1-12-wayland-compositor-released-with-hdr10-support-via-vulkan-renderer

Labwc 0.20 Wayland Compositor Released with wlroots 0.20 Support:
https://linuxiac.com/labwc-0-20-wayland-compositor-released-with-wlroots-0-20-support/

Ubuntu 26.10 daily builds now available to download:
https://www.omgubuntu.co.uk/2026/05/ubuntu-26-10-daily-builds

Manjaro 26.1 Preview Brings GNOME 50, Plasma 6.6, and Kernel 7.0 to Your Desk:
https://www.linuxcompatible.org/story/manjaro-linux-261-bianmay-preview-4-released/

NixOS 26.05 “Yarara” Released with GNOME 50, systemd by Default for Stage 1:
https://9to5linux.com/nixos-26-05-yarara-officially-released-with-gnome-50-systemd-by-default

MX Linux 25.2 Brings Kernel Patches, Text Mode Installer, and Better Live Persistence:
https://www.linuxcompatible.org/story/mx-linux-252-released/

Rhino Linux 2026.1 snapshot brings Lomiri desktop to x86_64 and ARM64:
https://alternativeto.net/news/2026/5/rhino-linux-2026-1-snapshot-brings-lomiri-desktop-to-x86_64-and-arm64/

Armbian 26.5 Released with Linux 7.0, Ubuntu 26.04 LTS Builds, and More:
https://9to5linux.com/armbian-26-5-released-with-linux-7-0-ubuntu-26-04-lts-builds-and-more

Qubes OS 4.3.1 Release Candidate Brings Fedora 43 and Critical Security Patches:
https://www.linuxcompatible.org/story/qubes-os-431-rc1-released/

(more Linux and FOSS news in comments)

#WeeklyNews #News #Linux #LinuxNews #AgeAttestation #AgeVerification #AgeVerificationLaw #KDE #KDEPlasma #AppGrid #Sway #Labwc #Ubuntu #Manjaro #NixOS #MXLinux #RhinoLinux #Armbian #QubesOS #DistroRelease #DesktopEnvironment #DistributionRelease #LinuxDesktop #DesktopLinux #FosseryTech

What's the matter with onions?
http://forums.dds6qkxpwdeubwucdiaord2xgbbeyds25rbsgr73tbfpqpt4a6vjwsyd.onion/t/forum-onion-unstable-connect

#Whonix #QubesOS #Onionsite #OnionAddresses #onion #tor #debian #infosec #linux

Dear Qubes OS Berlin users! 🌞

Join us Friday, May 29, 6-8pm at @xHain_hackspace!

Following last month's impromptu session (huge thanks to Ben!), there will be another hands-on dev session! 💻

Check out these beginner-friendly issues to begin your contribution journey 🚀 :

https://github.com/QubesOS/qubes-issues/issues?q=is%3Aissue%20state%3Aopen%20label%3A%22good%20first%20issue%22%20no%3Aassignee

Or just come chat about:
- Qubes OS intro/installation
- & <Your topic of interest>!

Snacks and great company guaranteed!

All creatures welcome! <3

#qubesos #meetup #berlin #xhain