Meta tags:

Headings (most frequently used words):

2014, qubes, blog, os, the, thursday, 26, august, of, release, r2, invisible, things, lab, monday, february, 09, 2015, november, 27, friday, september, tuesday, wednesday, 06, sunday, april, 20, january, 16, about, me, links, archive, labels, total, pageviews, migrating, my, out, blogger, r3, odyssey, initial, source, code, announcing, physical, separation, vs, software, compartmentalization, rc2, debian, template, ssled, wiki, badusb, and, more, rc1, has, been, released, shattering, myths, windows, security,

Text of the page (most frequently used words):
the (147), and (79), qubes (77), for (55), this (35), that (31), which (27), with (24), #security (23), release (22), some (21), all (20), also (20), our (20), #windows (19), more (19), been (18), new (18), not (17), would (16), has (16), just (15), have (15), still (14), one (14), 2014 (13), isolation (13), well (13), other (13), work (13), from (13), xen (12), august (12), use (12), wni (12), today (12), september (11), about (11), could (11), most (11), but (11), support (11), templates (11), odyssey (10), joanna (10), based (10), hypervisor (10), such (10), are (10), can (10), now (10), like (10), blog (9), things (9), will (9), problems (9), community (9), desktop (9), out (8), rutkowska (8), even (8), very (8), people (8), those (8), they (8), should (8), you (8), features (8), there (8), these (8), usb (7), june (7), january (7), february (7), april (7), posted (7), because (7), kernel (7), vms (7), think (7), system (7), after (7), paper (7), final (7), template (7), code (7), better (6), may (6), march (6), comments (6), mechanisms (6), linux (6), etc (6), start (6), get (6), time (6), gui (6), here (6), before (6), only (6), currently (6), related (6), might (6), secure (5), virtualization (5), july (5), november (5), december (5), hypervisors (5), any (5), make (5), why (5), future (5), lots (5), few (5), rc1 (5), users (5), really (5), updates (5), hcl (5), don (5), iso (5), debian (5), what (5), upstream (5), years (5), world (4), trusted (4), labels (4), october (4), invisible (4), lab (4), thursday (4), when (4), flexible (4), months (4), edition (4), then (4), real (4), upgrade (4), finally (4), building (4), actually (4), specific (4), used (4), turned (4), model (4), itl (4), two (4), solve (4), course (4), appvms (4), version (4), yet (4), need (4), via (4), plan (4), possible (4), much (4), wiki (4), working (4), thanks (4), transmission (4), privacy (4), architecture (3), rootkits (3), 2015 (3), view (3), described (3), ago (3), minimal (3), allow (3), install (3), inter (3), monolithic (3), never (3), exposed (3), various (3), services (3), lot (3), over (3), default (3), sophisticated (3), framework (3), enough (3), able (3), build (3), invested (3), core (3), quite (3), into (3), without (3), domain (3), technical (3), who (3), hope (3), read (3), releasing (3), last (3), installed (3), beta (3), take (3), dom0 (3), installation (3), however (3), previous (3), please (3), mailing (3), full (3), running (3), repo (3), coming (3), separate (3), released (3), rc2 (3), down (3), testing (3), porting (3), mostly (3), logo (3), cool (3), trivial (3), specifically (3), see (3), believe (3), way (3), try (3), physical (3), stack (3), insecurity (3), seems (3), exciting (3), includes (3), projects (3), fine (3), recommend (3), possibilities (3), developers (3), management (3), admin (3), flexibility (3), api (3), qrexec (3), post (3), guys (2), chipset (2), computing (2), general (2), 2009 (2), 2010 (2), 2013 (2), migrating (2), blogger (2), project (2), twitter (2), rootkovska (2), complete (2), posts (2), mentioned (2), primitive (2), their (2), consumer (2), sure (2), process (2), provided (2), compared (2), processes (2), case (2), calls (2), call (2), probably (2), thousands (2), expose (2), often (2), devices (2), typical (2), needs (2), virtualized (2), long (2), implemented (2), nearly (2), object (2), bring (2), desktops (2), best (2), once (2), using (2), hyper (2), look (2), behave (2), orders (2), magnitude (2), both (2), mechanism (2), was (2), independent (2), non (2), standard (2), components (2), order (2), achieve (2), goals (2), networking (2), sadly (2), happy (2), main (2), somebody (2), write (2), your (2), downloaded (2), sunday (2), candidate (2), expected (2), bringing (2), tools (2), published (2), upgrading (2), current (2), simple (2), distro (2), tasks (2), usual (2), instructions (2), note (2), days (2), weeks (2), instead (2), being (2), signature (2), switching (2), between (2), seamless (2), automatically (2), download (2), bit (2), appstore (2), arch (2), though (2), contributed (2), fedora (2), wednesday (2), open (2), stable (2), identical (2), bug (2), happened (2), scripts (2), first (2), light (2), weight (2), cases (2), notourbug (2), help (2), ideally (2), appvm (2), built (2), experimental (2), integration (2), special (2), signed (2), server (2), maintenance (2), find (2), advanced (2), traffic (2), got (2), own (2), set (2), wallpapers (2), right (2), choose (2), every (2), systems (2), user (2), yes (2), known (2), back (2), requires (2), made (2), manual (2), automatic (2), level (2), formally (2), verified (2), done (2), making (2), place (2), tuesday (2), many (2), point (2), devel (2), list (2), friday (2), say (2), powerful (2), since (2), beginning (2), great (2), port (2), adviser (2), policy (2), interested (2), car (2), road (2), technologies (2), stuff (2), others (2), concept (2), abstraction (2), layer (2), hal (2), meantime (2), source (2), switch (2), lxc (2), actual (2), supported (2), how (2), missing (2), daemon (2), initial (2), internal (2), vchan (2), rewritten (2), performance (2), libvchan (2), monday (2), platform (2), skip (2), total, pageviews, saving, afterhours, personal, nested, formal, verification, challanges, bitlocker, bios, heap, exploiting, cloud, bad, attacking, backdoors, smm, disk, encryption, conferences, tpm, hacking, execution, technology, company, news, exploit, fighting, philosophical, attack, 2006, 2007, 2008, 2011, 2012, archive, links, profile, founder, lead, subscribe, atom, home, older, originally, several, consider, native, type, provider, basic, idea, attractive, indeed, effort, run, normal, laptops, offered, lousy, simply, sizes, interfaces, untrusted, entities, incomparable, gdi, contains, bugs, waiting, discovered, kid, ida, tens, drivers, unsecured, ioctls, parsing, incoming, packets, infos, filesystem, metadata, additional, part, privileged, interface, cpu, emulated, old, fashined, pentium, era, svga, graphics, adapter, memory, anyway, knowing, believed, whole, sense, offer, significant, boost, essentially, equivalent, pity, complex, acls, applicable, recent, uipi, uac, liked, pretty, seamlessly, perhaps, implement, similarly, albeit, stronger, decided, covered, adjusting, were, evaluating, proper, spaces, story, end, came, conclusion, usable, publish, findings, concluded, inadequate, practice, written, rafał, wojdyła, joined, task, implementing, learn, thing, reading, little, dumb, dos, shattering, myths, milestone, mainly, improvements, polishing, bugfixes, require, proprietary, repositories, r2rc1, smooth, procedure, hours, seen, minor, cosmetic, left, quick, detailed, found, compile, wait, reports, reasonable, expect, subset, keep, mind, control, servers, served, always, verify, digital, installing, direct, questions, regarding, enjoy, lists, ticketing, fly, modes, mode, arbitrary, window, resizing, adjusts, resolution, definitions, imagination, fc20, upload, produced, sources, ourselves, upgraded, previously, second, tickets, summer, holidays, hit, number, unreliable, ups, prevalent, problem, traced, systemd, manifesting, due, conditions, imposed, startup, bootup, initialization, didn, side, effect, heavy, optimizations, stripping, environment, otherwise, assumed, applications, kind, happen, unlucky, manifest, debugging, patching, higher, chances, addressed, quicker, partner, include, test, speaking, different, distros, recently, popular, request, expressed, readily, command, supposed, class, clipboard, file, copy, box, contributors, providing, patches, required, agents, nevertheless, configured, fetch, forward, customized, purpose, moved, bigger, ec2, instance, handle, increased, added, ssl, certificate, encourage, irrelevant, standpoint, checking, signatures, isos, had, means, its, distinct, themes, installer, plymouth, bunch, nicely, engraved, them, convincing, kde, wallpaper, exceeds, collective, mental, abilities, click, branded, manually, while, operating, solution, whenever, remotely, cares, widespread, facts, recognition, primary, motivator, appropriate, hardware, intel, correction, administrator, unfortunately, configuration, decisions, human, operator, sports, skill, near, reason, offering, speed, whose, early, planned, sometime, closer, experience, researcher, safe, languages, microkernels, sensibly, doesn, preclude, microkernel, least, editions, announcement, writing, suddenly, felt, form, expression, commentary, happening, account, deluded, sick, permissions, insecurities, inherent, discover, ssled, badusb, holy, grail, physically, machines, belief, natural, give, thought, than, airgap, argue, good, depth, discussions, around, topics, discussed, separation, software, compartmentalization, gonna, announcements, suffice, come, biggest, difficulties, facing, amount, extra, directly, needed, ensure, line, sometimes, thin, easily, cross, careful, receiving, contributions, fixes, invaluable, efforts, backups, torvm, whonix, announce, advocate, expert, data, protection, law, member, board, tor, former, microsoft, chief, taking, role, helping, suitable, wider, audience, liaising, base, front, obligatory, analogy, racing, went, production, vehicle, hell, engine, under, hood, until, unavailable, professional, lacking, leather, interior, speaker, audio, driveable, insert, fav, german, cars, next, stay, tuned, journey, xorg, everyone, caspar, bowden, documentation, proof, beta3, beta2, beta1, announcing, started, generalizing, named, multiple, space, understanding, wandering, polish, state, earlier, fall, heavily, researching, hear, dead, ends, public, builds, instruction, produces, intend, towards, containerization, highly, devlopers, discuss, coding, backend, latest, versions, become, available, although, decision, rush, brainer, remember, unlike, someting, change, month, aim, having, needing, interesting, imagine, live, backends, kvm, given, laptop, major, going, officially, decide, further, immediate, application, above, introduce, remote, installations, absolutely, necessary, feature, corporate, adoption, meaning, perfectly, endless, join, revolution, split, semi, depriviliged, opportunity, add, slelect, manager, rewrite, python, classes, interest, implementation, know, original, improved, included, starting, slightly, utilize, results, especially, important, confused, controller, pass, below, failure, migrated, hosted, blogging, explains, reasons, migration, sidebar,

Text of the page (random words):
e confused with usb controller pass though there is still some work going on which we would like to complete before we officially decide to release qubes os 3 0 rc1 iso and this includes rewrite of some internal code for the core management stack which includes internal api of the python classes this should mostly be of no interest to users and even most developers working on qubes initial code for qubes admin api and port of qubes manager to use it further down the road qubes os 3 1 we plan to work on some really exciting things more flexibility to qrexec policy more on that in a separate post more flexibility to qubes admin api expose it to slelect other vms split of dom0 into semi depriviliged gui domain and minimal admin domain this would be great opportunity to also add the missing hal support for the gui daemon one of the immediate application of these features above would be to introduce support for remote management of qubes installations an absolutely necessary feature for corporate adoption of qubes also note how all these tasks are independent of the actual hypervisor support meaning it s perfectly possible for other developers to work on porting other hypervisors to qubes in the meantime the possibilities seems to be endless now join us and help us with the revolution posted by joanna rutkowska at thursday november 27 2014 labels odyssey qubes r3 friday september 26 2014 announcing qubes os release 2 today we re releasing qubes os r2 i m not gonna write about all the cool features in this release because you can find all this in our wiki and previous announcements r2 beta1 r2 beta2 r2 beta3 r2 rc1 and r2 rc2 suffice to say that we ve come a long way over those 4 years from a primitive proof of concept to a powerful desktop os which i believe it is today one of the biggest difficulties we have been facing with qubes since the very beginning has been the amount of this extra not so exciting not directly security related work but so much needed to ensure things actually work yet the line between what is and what is not security related is sometimes very thin and one can easily cross it if not being careful it s great that we re receiving more and more community contributions this includes not only bug fixes but also invaluable efforts related to documentation hcl maintenance as well as some really non trivial new features advanced backups support debian and arch templates torvm whonix port etc thanks i m also happy to announce that caspar bowden a well known privacy advocate expert on eu data protection law member of the board of tor former microsoft chief privacy adviser etc will be taking a role as qubes policy adviser helping us to make qubes os more suitable for a wider audience of people interested in privacy and be liaising with other projects that would like to build privacy services with qubes as a base and there is still a lot in front of us using the obligatory car analogy i would say qubes os is currently like a racing car that just went into production as a road vehicle one hell of an engine under the hood and powerful new technologies until now unavailable even for professional use yet lacking leather interior with 12 speaker audio system and still with a manual transmission this is just the beginning for making security by isolation on the desktop as driveable as a insert your fav make of german fine cars exciting stuff is coming next the release 3 odyssey and more stay tuned thanks to everyone who has made qubes os possible as well as all the upstream projects without which we would probably never even try this journey xen linux xorg and many others posted by joanna rutkowska at friday september 26 2014 9 comments labels qubes tuesday august 26 2014 physical separation vs software compartmentalization many people believe the holy grail of secure isolation is to use two or more physically separate machines this belief seems so natural that we often don t give it much thought after all what better isolation could we possible get than physical airgap i argue with this point of view in this new paper i think a good place for in depth technical discussions around the topics discussed in the paper would be our qubes devel mailing list posted by joanna rutkowska at tuesday august 26 2014 wednesday august 06 2014 qubes os r2 rc2 debian template ssled wiki badusb and more today we re release the second release candidate rc2 for qubes os r2 there are currently no more open tickets for the final r2 release and we hope that what we release today is stable enough and so will be identical or nearly identical to the final r2 iso which we plan to release after the summer holidays download and installation instructions are here after qubes rc1 release a few months ago we have been hit by a number of problems related to unreliable vm start ups the most prevalent problem has been traced down to an upstream bug in systemd which just happened to be manifesting on qubes os due to specific conditions imposed by our startup scripts actually it has not been the first time when some things related to vm bootup or initialization didn t work quite well on qubes a side effect of heavy optimizations and stripping down we do in order to make the vms as light weight as possible e g we don t start most of the desktop environment which otherwise is assumed to be running by various desktop related applications and services in most cases these are really notourbug kind of problems yet we just happen to be unlucky they manifest on qubes we do need more help from the community with testing debugging and patching such notourbug problems in the upstream the more people use qubes os the higher the chances such problems will be addressed much quicker ideally in the future we could partner with a linux distro that would include qubes appvm as one of the test cases speaking of different linux distros we have also recently built and released an experimental beta debian template for qubes appvms a popular request expressed by our users for quite some time it can be readily installed with just one command as described in the wiki it is supposed to behave as a first class qubes appvm with all the qubes signature vm integration features such as seamless gui virtualization secure clipboard secure file copy and other integration all working out of the box special thanks to our community contributors for providing most of the patches required for porting of our agents and other scripts to debian this template is currently provided via our templates community repo but it nevertheless has been built and signed by itl and is also configured to fetch updates for qubes tools from our server but we look forward for somebody from the community to take over from us the maintenance building testing of the updates for this template also in our templates appstore you can find now an experimental minimal fedora based template which might be used by more advanced users to build customized special purpose vms and templates we have also moved our wiki server to a bigger ec2 instance so it could better handle the increased traffic and also added a real ca signed ssl certificate but i encourage people to read why this is mostly irrelevant from the security standpoint and why they should still be checking signatures on the isos we also got a new logo actually we never really had our own logo before this also means qubes now got its own distinct set of themes for installer plymouth and of course a bunch of cool wallpapers with qubes logo nicely engraved on them however it turned out that convincing kde to set our wallpaper as a default one exceeds the collective mental abilities of itl and so one needs to right click on the desktop and choose one of the qubes branded wallpapers manually after install or upgrade every once in a while people re discover that monolithic kernel based desktop operating systems are not the best solution whenever the user even remotely cares about security yes usb inherent insecurity as well as widespread gui insecurity or networking stack insecurity trivial physical insecurities or sick permissions model as used in most desktop systems have all been known facts for years the recognition of these problems has been the primary motivator for us to start the work on qubes os back in 2009 2010 and yes qubes running on an appropriate hardware specifically with intel vt d can solve most of these problems correction qubes os can allow the user or administrator to solve these problems as unfortunately this still requires some configuration decisions made by the human operator so today qubes r2 is like a sports manual transmission which requires a bit of skill to get most out of it in the near future i see no reason why we should not be offering the automatic 8 speed transmission edition of qubes os we just need more time to get there the r3 release odyssey based whose early code is planned to be released just after the final r2 so sometime in september is all about bringing us closer to that automatic transmission version with my 10 years of experience as a system level security researcher i believe there is no other way to go don t get deluded that safe languages or formally verified microkernels could solve these problems security by isolation done sensibly is the only way to go of course it doesn t preclude making use of some formally verified components like e g microkernel in place of xen at least in some editions of qubes finally one more announcement for today after writing this blog for 8 years i ve suddenly felt like i might need to try also some new form of expression and so for a few days i now have a twitter account rootkovska which i hope to use for updates on qubes as well as more general commentary on various things happening in it security posted by joanna rutkowska at wednesday august 06 2014 11 comments labels os security qubes usb sunday april 20 2014 qubes os r2 rc1 has been released today we re releasing qubes os r2 rc1 release candidate which is expected to be the last milestone before the final qubes os r2 release as mentioned previously today s release is bringing mainly ui improvements and polishing and lots of bugfixes as well as some last new features both dom0 and vms have been upgraded to fedora 20 support for full templates download via two new repo definitions templates itl and templates community with a bit of imagination we could call it qubes appstore for vms currently we have only published one template there the new default fc20 based template but we plan to upload more templates in the coming weeks such as the community produced arch linux and debian templates even though we have a separate repo for community contributed templates we still plan on building those templates ourselves from contributed sources support for running windows appvms in full desktop mode with support for arbitrary window resizing which automatically adjusts the resolution in the vms support for on the fly switching between the full desktop and seamless modes for windows appvms the last two features require of course our proprietary qubes windows tools to be installed in the windows appvms to work which new version we have also published to the new repositories for r2rc1 we support smooth upgrading for current qubes r2 beta 3 users the procedure is very simple yet it will take some hours because of the dom0 distro upgrading as can be seen in our ticketing system there really are only few minor cosmetic tasks left before the final qubes r2 release it is expected that upgrade from today s release to the final r2 will be very simple and quick just standard updates installation as usual the detailed installation and upgrade instructions as well as the hcl can be found here note however that the hcl for the today s release will take some days weeks to compile as we need to wait for reports from the community and so for this time the hcl for the previous release r2 beta 3 should be used instead it is reasonable to expect that the new hcl will be a subset of the previous one also as usual please keep in mind that we don t control the servers from which the iso is being served and so please always make sure to verify the digital signature on the downloaded iso before installing it please direct all the technical questions or comments regarding qubes os to our mailing lists enjoy posted by joanna rutkowska at sunday april 20 2014 10 comments thursday january 16 2014 shattering the myths of windows security when i originally described the flexible qubes odyssey framework several months ago i mentioned that we would even consider to use windows native isolation mechanisms as a primitive type of isolation provider hypervisor for some basic edition of qubes for windows the idea has been very attractive indeed because with minimal effort we could allow people to install and run such qubes wni on their normal consumer windows laptops sure the inter process isolation provided by a monolithic kernel such as windows or linux could never be compared to the inter vm isolation offered even by the most lousy hypervisors this is simply because the sizes of the interfaces exposed to untrusted entities processes in case of a monolithic kernel vms in case of a hypervisor are just incomparable just think about all those windows system calls and gdi calls which any process can call and which contains probably thousands of bugs still waiting to be discovered by some kid with ida and think about those tens of thousands of drivers which also expose often unsecured ioctls as well as parsing the incoming packets usb devices infos filesystem metadata etc and then think about various additional services exposed by system processes which are not part of the kernel but which are still trusted and privileged and now think about the typical interface that needs to be exposed to a typical vm it s just the virtualized cpu some emulated devices some old fashined pentium era chipset svga graphics adapter etc and virtualized memory anyway knowing all this i still believed that qubes wni would make a whole lot of sense this is because qubes wni would still offer a significant boost over the just windows default security which is still essentially equivalent to the ms dos security model and this is a real pity because windows os has long implemented very sophisticated security mechanisms such as complex acls applicable to nearly any object as well as recent mechanisms such as uipi uac etc so why not use all those sophisticated security to bring some real world security to windows desktops and best of all once people start using qubes wni and they liked it they could then pretty seamlessly upgrade to xen based qubes os or perhaps hyper v based qubes os when we implement it and their system would look and behave very similarly albeit with orders of magnitude stronger security finally if we could get our odyssey framework to be flexible enough to support both qubes wni as well ...