Syonyk

32 ms·

331.
by Syonyk 3y ago
It depends on who you're targeting and what you want. But the history of computers security can largely be summed as: "What? You're just paranoid. Nobody would possibly X!" Someone gets their asses handed to them by so
332.
by Syonyk 3y ago
I'll have to look at it more. I mostly use AMD systems these days, which don't support nested virt in Xen, as I understand it, but it looks like it should work on Intel.
333.
by Syonyk 3y ago
And "anything untrusted" includes "any use of the internet." Browser escapes are cheap enough and common enough that we've seen malware delivered through advertising networks before.
334.
by Syonyk 3y ago
There are ways to get it running without an IOMMU, mostly involving making your NetVM and such paravirtualized. You just lose basically all of the hardware isolation benefits there. But for playing around, especially on a trusted LAN, you
335.
by Syonyk 3y ago
Yeah. He's probably right. When we first saw Meltdown/Spectre/etc, and he preemtively disabled hyperthreading out of an abundance of paranoia, turned out he was right... It's all broken, all the way down. However, com
336.
by Syonyk 3y ago
If you have the skills to port the tools to KVM, please do so. There's a shortage of sufficiently paranoid low level sorts with the time and interest in the hacking on Qubes. Getting it working on ARM is also of interest.
337.
by Syonyk 3y ago
And if you'll note, under your original comment I added some detail on how to enable nested virtualization in Qubes.
338.
by Syonyk 3y ago
You can. It's just neither recommended nor enabled by default. https://forum.qubes-os.org/t/nested-virtualization/14790 Poke around /etc/libvirt/libxl and your particular VM's config fi
339.
by Syonyk 3y ago
The problem is that containers rely on the OS kernel to enforce separation, and kernel exploits are an awful lot less rare than anyone would prefer. If someone is delivering targeted malware to a company through HR channels, it's safe
340.
by Syonyk 3y ago
If your hypervisor supports nested virtualization, it should work. It'll probably grumble about the lack of IOMMU and various other things, but you should be able to run it in VMWare or KVM, if you're willing to jump through some
341.
by Syonyk 3y ago
> What kind of threat model requires someone to use Qubes? "Not trusting modern software to be correct nor secure" is sufficient. I do almost all my web browsing in disposable VMs with no access to interesting things like my
342.
by Syonyk 3y ago
The threat model assumes that any code in a VM can, with some application of effort, access anything else in that VM. Given the relatively low cost of local root exploits and kernel exploits, this is reasonable. Passwordless sudo is simpl
343.
by Syonyk 3y ago
Containers rely on the kernel to enforce separation. They're great for keeping trusted workloads from interfering with each other, but I don't trust them for potentially hostile workload separation. If you can compromise the kern
344.
by Syonyk 3y ago
It's fine for light to moderate use, just don't expect to run a ton of AppVMs at once. I've got an X250 (2C/4T) 16GB gutless wonder as my Qubes laptop, and it's fine. Qubes has memory balancing/clawback from V
345.
by Syonyk 3y ago
Yeah. I started playing with it about 2 years ago, and I now caution people that "it's really a bit virus-like." It went from being on one "play" computer to being my daily driver OS on 4 machines in that time. It
346.
by Syonyk 3y ago
Yes. I'd say I'm probably one of those sort, though I'm well enough stocked that it's of no matter to me at this point. I use them in the evenings, on deep dimmers, because I've given up trying to find LED bulbs th
347.
by Syonyk 3y ago
If you want the "full experience," just set yourself up as a Tor exit node. You'll rapidly find it's impossible to use the internet from the same connection. VPN services are more and more falling into the same categor
348.
by Syonyk 3y ago
> ...the anti-abuse options are usually more expensive. So you can read into that, "This is how profitable it is to abuse your users." Smart TV companies make more money selling behavioral data now than they do selling TVs.
349.
by Syonyk 3y ago
And suddenly, a new style of ad: "Work from home! Be your own CEO! For a mere $5000, we set up your company, brand our products, and you get all the credit! No technical skills needed, just a bank account to receive your monthly inc
350.
by Syonyk 3y ago
Yeah, I got tired of replacing batteries and now keep just about everything infrequently used on a battery tender. Lead acid as used in cars doesn't like being deeply discharged, so a couple good deep charges will trash them. A batte
351.
by Syonyk 3y ago
> The obvious answer is just stop buying this junk, but how would anyone know? You don't have to know. You can safely guess. Assume anything "connected" is shouting as much as it possibly can, upstream, at all points i
352.
by Syonyk 3y ago
Of course it is. Because that's what "consumer tech" has turned into. An excuse to lie to end users as much as you can possibly get away with, to collect as much information from them as you possibly can, gatekept by compani
353.
by Syonyk 3y ago
> It’s interesting to consider a Linux distribution that fixes these problems. I’ve thought a little bit about a secure linux desktop. But alas, what a waste of time that would be, right? It's called QubesOS. https://ww
354.
by Syonyk 3y ago
Try it. A 240fps high speed is more than enough to observe a variety of LED flickering behaviors. Some flicker none (Bedtime Bulb is remarkable in the lack of flicker), some flicker at high enough frequency you can't really make out
355.
by Syonyk 3y ago
Yeah. Incandescents were "Deprecated but still available, and not many people worried about it" for about the past 7 years or so, and you could still find them at stores, if you cared. Trump expressed his dislike for LED and CFL l
356.
by Syonyk 3y ago
5-6x, yes. And I can't help but think my neighbor with literally hundreds of watts of LED bulbs around the outside of their house might not decide to light the night quite as often if they were all incandescents. I can read a newspa
357.
by Syonyk 3y ago
Visually, no, probably not. But in terms of your body's melatonin production and sleep, the Philips smart bulbs can get very peaky in terms of blue, in the range that matters. https://www.sevarg.net/2023/03/11
358.
by Syonyk 3y ago
> Surely there are other, more reliable ways, to keep a space heated during winter months? Sure, there are plenty of other ways to keep a space heated. They're all radically more expensive, and radically more failure prone, than
359.
by Syonyk 3y ago
Philips Warm Glow. They seem to be obsoleted, all I can find for them is new old stock anymore. Which I've bought up a bunch of, because the damned things keep failing on me. I've had a set of 5 in service for about 6 years, and
360.
by Syonyk 3y ago
LEDs flicker differently. An incandescent has 10-15% brightness flicker at 120Hz. LEDs... vary. Some flicker a lot harder at 120Hz, some (mostly LED Christmas lights) are awful and flicker at 60Hz with a 50% duty cycle because they&#x27

More ›