0.8 qubes-os-summit-2023 2023-10-06 2023-10-08 3 00:05 https://cfp.3mdeb.com https://cfp.3mdeb.com/media/qubes-os-summit-2023/img/Qubes-Summit-logo_CwngDhR.png Europe/Berlin Social Hub Main Room Speaker at location 2023-10-06T10:00:00+02:00 10:00 00:25 Join us as we inaugurate the Qubes OS Summit 2023 with a hearty welcome, fostering connections and setting the stage for an exchange of ideas over the next few days. Here's a glimpse of what we'll delve into: - Reminisce the Past: A brief look back at the humble beginnings of the Qubes Summit and the simple idea of trustworthiness that brought us all together. - Reflect on the Journey: Since we last met, there have been small but significant strides in the Qubes OS community. We'll share the essence of what has changed, the lessons learned, and the paths forged. - Unfold the Schedule: We’ll unveil our simple yet engaging agenda for the next few days. From enlightening talks through open discussions, design sessions, and hackathon. - Appreciate the Support: A big shout out to our sponsors who share our common vision for a privacy-centric digital world. qubes-os-summit-2023-46-welcome-to-qubes-os-summit-2023-day-1 Piotr KrólMarek Marczykowski-Górecki en false PDF Presentation https://cfp.3mdeb.com/qubes-os-summit-2023/talk/HYETEF/ https://cfp.3mdeb.com/qubes-os-summit-2023/talk/HYETEF/feedback/ Social Hub Main Room Speaker at location 2023-10-06T10:30:00+02:00 10:30 00:30 This talk is a summary of projects Qubes team currently works on, a summary what we accomplished for 4.2 release, and what is left to be finished for the next release. qubes-os-summit-2023-41-qubes-os-development-status-update Marek Marczykowski-Górecki en false slides https://cfp.3mdeb.com/qubes-os-summit-2023/talk/PFTVVG/ https://cfp.3mdeb.com/qubes-os-summit-2023/talk/PFTVVG/feedback/ Social Hub Main Room Speaker at location 2023-10-06T11:10:00+02:00 11:10 00:30 In the collaborative world of technology, progress is forged through partnerships and shared visions. 3mdeb, grounded in this philosophy, has been actively engaging with various stakeholders in its mission to enhance the trustworthiness of computing devices, with a spotlight on client-level solutions. This keynote, to be delivered by the founder of 3mdeb, narrates our collective journey, a path defined by collaborative endeavors, learning from partnerships, and a steadfast commitment to fostering security, privacy, and trust in the Qubes OS ecosystem and beyond. Join us as we share the milestones achieved, the lessons learned, and the road ahead in our collaborative journey towards a more secure and trustworthy computing landscape. qubes-os-summit-2023-36-a-collaborative-endeavor-our-journey-towards-enhancing-trustworthiness-of-computing-devices Piotr Król en false PDF Presentation https://cfp.3mdeb.com/qubes-os-summit-2023/talk/RGWMTR/ https://cfp.3mdeb.com/qubes-os-summit-2023/talk/RGWMTR/feedback/ Social Hub Main Room Speaker at location 2023-10-06T11:50:00+02:00 11:50 01:00 In the 13 years since Qubes OS was released, the broader desktop ecosystem has changed in many ways. Some are good for Qubes OS, such as broader hardware virtualization support and the rise of immutable OS. Others are problematic for Qubes OS, such as increasing dependence on GPU acceleration. Yet others are neutral but not backwards compatible, such as the switch from X11 to Wayland and from PulseAudio to PipeWire. In this talk, I will discuss how Qubes OS can adapt to the changing ecosystem and the new use-cases this will open up. qubes-os-summit-2023-43-qubes-os-and-ecosystem-changes-how-can-we-change-with-them Demi Marie Obenour en false https://cfp.3mdeb.com/qubes-os-summit-2023/talk/DBNWSD/ https://cfp.3mdeb.com/qubes-os-summit-2023/talk/DBNWSD/feedback/ Social Hub Main Room Speaker at location 2023-10-06T13:00:00+02:00 13:00 01:00 Lunch break qubes-os-summit-2023-53-lunch-break Break en false https://cfp.3mdeb.com/qubes-os-summit-2023/talk/TCHVGS/ https://cfp.3mdeb.com/qubes-os-summit-2023/talk/TCHVGS/feedback/ Social Hub Main Room Speaker at location 2023-10-06T14:10:00+02:00 14:10 00:30 Qubes OS is good at being secure, but bad at UX - that's the common knowledge. However, I would like to argue that bad UX can actually be bad security, and that bad design decisions are not just annoying, but can be actively detrimental to the security of the system. qubes-os-summit-2023-39-bad-ux-is-bad-security-adventures-in-qubes-os-ux-design Marta "marmarta" Marczykowska-Górecka en Based on examples from my own work on Qubes OS and interesting cases from other software, I want to explore the directions Qubes OS user interface and interaction design is going, design principles that guide our work, and discuss some new exciting developments that happened in the last year. false https://cfp.3mdeb.com/qubes-os-summit-2023/talk/F7RJV3/ https://cfp.3mdeb.com/qubes-os-summit-2023/talk/F7RJV3/feedback/ Social Hub Main Room Speaker at location 2023-10-06T14:50:00+02:00 14:50 00:30 Deeplow will be presenting his ongoing work on video tutorials for Qubes OS and how he set up his computer to be able to record and edit fully on Qubes OS. qubes-os-summit-2023-45-from-zero-to-hero-video-tutorials-for-qubes-os-fully-recorded-edited-on-qubes /media/qubes-os-summit-2023/submissions/FQSPRP/screen_S3twkhy.png Deeplow en Deeplow will be presenting his ongoing work on video tutorials for Qubes OS and how he set up his computer to be able to record and edit fully on Qubes OS. This is a continuation of the work on the integrated onboarding tutorial, but following a more pragmatic approach of recording video tutorials. true Presentation https://cfp.3mdeb.com/qubes-os-summit-2023/talk/FQSPRP/ https://cfp.3mdeb.com/qubes-os-summit-2023/talk/FQSPRP/feedback/ Social Hub Main Room Speaker at location 2023-10-06T15:30:00+02:00 15:30 00:30 Qubes OS device use flow leaves much to be desired - from confusing USB storage to eternal woes of connecting camera and microphone at the same time to the correct qube, it's all not quite as smooth as we would like. I am currently working on improving this situation with a more cohesive device UX for Qubes. qubes-os-summit-2023-40-device-ux-redesign Marta "marmarta" Marczykowska-Górecka en In this talk, I will discuss some of the planned improvements to Qubes OS device UX - from better handling of USB storage, redesign of the devices widget, and more. This talk will also serve as an introduction to the device design session on Saturday, where I would like to workshop the proposed changes, listen to feedback and discuss ideas for improving the ways Qubes OS allows the user to interact with their devices. false https://cfp.3mdeb.com/qubes-os-summit-2023/talk/CQLEWM/ https://cfp.3mdeb.com/qubes-os-summit-2023/talk/CQLEWM/feedback/ Social Hub Main Room Speaker at location 2023-10-06T16:10:00+02:00 16:10 01:30 Device UX Design Session qubes-os-summit-2023-54-device-ux-design-session Design session Marta "marmarta" Marczykowska-Górecka en false https://cfp.3mdeb.com/qubes-os-summit-2023/talk/HXK8J9/ https://cfp.3mdeb.com/qubes-os-summit-2023/talk/HXK8J9/feedback/ Social Hub Main Room Speaker at location 2023-10-06T17:50:00+02:00 17:50 00:10 Closing notes qubes-os-summit-2023-48-qubes-os-summit-2023-day-1-closing-notes Piotr Król en true https://cfp.3mdeb.com/qubes-os-summit-2023/talk/WPW8NE/ https://cfp.3mdeb.com/qubes-os-summit-2023/talk/WPW8NE/feedback/ Social Hub Main Room Speaker at location 2023-10-06T19:30:00+02:00 19:30 04:00 Admiralstraße 1-2, 10999 Berlin, Germany https://maps.app.goo.gl/2rB2KUJWWJH7ENyFA https://www.openstreetmap.org/way/65425822 https://www.suedblock.org qubes-os-summit-2023-60-afterparty-sudblock Break en false https://cfp.3mdeb.com/qubes-os-summit-2023/talk/UG7PSG/ https://cfp.3mdeb.com/qubes-os-summit-2023/talk/UG7PSG/feedback/ Social Hub Main Room Speaker at location 2023-10-07T10:00:00+02:00 10:00 00:10 - Day 2 event schedule and organization announcements - Shout out to the sponsors qubes-os-summit-2023-47-welcome-to-qubes-os-summit-2023-day-2 Piotr KrólMarek Marczykowski-Górecki en false PDF Presentation https://cfp.3mdeb.com/qubes-os-summit-2023/talk/FBSRGQ/ https://cfp.3mdeb.com/qubes-os-summit-2023/talk/FBSRGQ/feedback/ Social Hub Main Room Speaker at location 2023-10-07T10:15:00+02:00 10:15 00:30 A summary how to contribute to Qubes OS. The talk will focus on code changes, how it works currently and what we would like to change. Some non-code contributions like bug reports or documentation will also be covered. qubes-os-summit-2023-42-qubes-os-contributing-process Marek Marczykowski-Górecki en Qubes OS is a complex project that consists of several code repositories. This presentation will help new contributors to navigate it, how to make changes, and the process leading to including them in the official source tree. It will cover topics preparing changes to make them easy to review, opening pull requests, interpreting CI results, how the review process works, and finally what happens when a pull request is merged. Since most code changes are related to some issue, and many also to some documentation, those topics will be covered too. false slides https://cfp.3mdeb.com/qubes-os-summit-2023/talk/RAVUKY/ https://cfp.3mdeb.com/qubes-os-summit-2023/talk/RAVUKY/feedback/ Social Hub Main Room Speaker at location 2023-10-07T10:55:00+02:00 10:55 00:15 A short overview of the current effort to get S0ix (suspend to idle) working on Qubes OS. qubes-os-summit-2023-50-s0ix-support-for-qubes-os-a-quick-update Simon Gaiser en Some modern platforms stopped supporting classic S3 standby (suspend to RAM). Instead they only support S0ix (suspend to idle, also known as "Modern Standby"). Unfortunately for Qubes OS this isn't currently supported by Xen and Linux running under Xen. This talk will give an overview of the current state of the ongoing work to get support for S0ix on Qubes OS. false https://cfp.3mdeb.com/qubes-os-summit-2023/talk/73XJJR/ https://cfp.3mdeb.com/qubes-os-summit-2023/talk/73XJJR/feedback/ Social Hub Main Room Speaker at location 2023-10-07T11:20:00+02:00 11:20 00:30 In this presentation, we will introduce AEM and TrenchBoot, shedding light on how TrenchBoot's DRTM technology aims to improve AEM. We'll discuss our journey, covering the roadmap for integrating TrenchBoot into Qubes OS, sharing the challenges we've encountered, and highlighting recent advancements. Join us to explore the synergy between AEM and TrenchBoot, shaping a more secure future for Qubes OS users. qubes-os-summit-2023-38-trenchboot-anti-evil-maid-roadmap-challenges-and-advancements Maciej Pijanowski en false slides https://cfp.3mdeb.com/qubes-os-summit-2023/talk/HZ9FQE/ https://cfp.3mdeb.com/qubes-os-summit-2023/talk/HZ9FQE/feedback/ Social Hub Main Room Speaker at location 2023-10-07T12:00:00+02:00 12:00 00:25 NovaCustom is a leading supplier of secure laptops with Dasharo coreboot firmware. In this talk, Wessel will introduce some new Dasharo-NovaCustom October 2023 firmware update features. He will also give a demonstration of working Heads firmware, including a USB Security Device in combination with Qubes OS. Wessel will show some new physical privacy options during the installation, especially the new anti-tamper solution. qubes-os-summit-2023-61-novacustom-october-2023-update-anti-tamper-solutions-and-heads-firmware-demonstration Wessel klein Snakenborg en false https://cfp.3mdeb.com/qubes-os-summit-2023/talk/ULYQUA/ https://cfp.3mdeb.com/qubes-os-summit-2023/talk/ULYQUA/feedback/ Social Hub Main Room Speaker at location 2023-10-07T12:35:00+02:00 12:35 00:30 Creating and maintaining a Qubes OS configuration is no small feat, especially when striving for consistency across multiple devices or during device migrations. This tutorial delves into a developer's experience using the masterless configuration of SaltStack in Qubes OS to craft and manage a personalized set of AppVMs and TemplateVMs, aligning with a reasonably typical workflow, albeit less paranoid than the one suggested in the Qubes OS guide on organizing your qubes. qubes-os-summit-2023-35-tailoring-your-qubes-os-environment-a-developer-s-guide-to-leveraging-saltstack Piotr Król en In this tutorial, we narrate a developer's journey, illustrating the leverage of SaltStack's masterless configuration in Qubes OS to organize and manage a set of AppVMs and TemplateVMs, fostering a workflow that is hopefully typical for many users. We will delve into a series of features and configurations, showcasing them on a tuned Dasharo FidelisGuard Z690, including: - Debian-12 as Default Template VM: Setting up and utilizing Debian-12 as the default template VM, discussing the benefits and functionalities it brings to the table. - Email VM Configuration: Detailed walkthrough of configuring an email VM with Thunderbird, OpenGPG, NFS for email archives, and split-gpg2, ensuring a secure and efficient email management system. - Communication VM: Setting up a communication VM loaded with heavy technologies such as Element, Wire, Matterhorn, and other potentially invasive applications. We will cover aspects such as autostarting and configuring Matterhorn file openers. - SSH-Agent Configuration: A guide to setting up and configuring ssh-agent, enhancing security and functionality. - Vault VM Configuration: Insights into setting up a vault VM, focusing on security features and functionalities it offers. - Dev Needs Configuration: Tailoring a VM to cater to development needs, including the setup of zsh, vim, git, Python virtual environment, and tmux, fostering a developer-friendly environment. - VPN VM: Establishing a VPN VM, discussing its setup process and the security layers it adds to your Qubes OS environment. false PDF Presentation https://cfp.3mdeb.com/qubes-os-summit-2023/talk/CMXQLU/ https://cfp.3mdeb.com/qubes-os-summit-2023/talk/CMXQLU/feedback/ Social Hub Main Room Speaker at location 2023-10-07T13:10:00+02:00 13:10 01:00 Lunch break qubes-os-summit-2023-55-lunch-break Break en false https://cfp.3mdeb.com/qubes-os-summit-2023/talk/GENTAL/ https://cfp.3mdeb.com/qubes-os-summit-2023/talk/GENTAL/feedback/ Social Hub Main Room Speaker at location 2023-10-07T14:20:00+02:00 14:20 00:30 During the talk, I will introduce the CTAP2 proxy service in the Qubes OS, which replaces the older U2F proxy. Our new service has been designed to ensure compatibility with the new Fido2 standard, thus enabling the full capabilities of newer hardware keys such as device PIN. Throughout the presentation, we will delve into the details of the newly introduced `qrexec` policies and consider the issue of backward compatibility. Spoiler alert: you may not even notice the upgrade. qubes-os-summit-2023-44-universal-second-factor-and-qubes-os-4-2-can-we-still-use-our-old-u2f-keys Piotr Bartman-Szwarc en false slides https://cfp.3mdeb.com/qubes-os-summit-2023/talk/3KEXHW/ https://cfp.3mdeb.com/qubes-os-summit-2023/talk/3KEXHW/feedback/ Social Hub Main Room Speaker at location 2023-10-07T15:00:00+02:00 15:00 00:30 Multi VM application qubes-os-summit-2023-62-multi-vm-application Design session Deeplow en false https://cfp.3mdeb.com/qubes-os-summit-2023/talk/9RYPUA/ https://cfp.3mdeb.com/qubes-os-summit-2023/talk/9RYPUA/feedback/ Social Hub Main Room Speaker at location 2023-10-07T15:40:00+02:00 15:40 00:30 This talk will present the recent progress of the Qubes OS Documentation Localization project, focusing on weblate and a future Qubes Localization Workflow. qubes-os-summit-2023-52-qubes-os-documentation-localization m en Let us pick up from where we left off one year ago. We will discuss the tools and frameworks used to test a Qubes documentation localization - Sphinx, Weblate, Read the Docs. We will look at their benefits/drawbacks, compare them to the previous approach as a brief reminder. A small demo of a local stack setup, integrating Sphinx (reStructuredText), Weblate, Gitlab, Libretranslate will hopefully show a basic use case and a possible automatic localization workflow that can be utilized without an overhead maintenance. false https://cfp.3mdeb.com/qubes-os-summit-2023/talk/X8JPE9/ https://cfp.3mdeb.com/qubes-os-summit-2023/talk/X8JPE9/feedback/ Social Hub Main Room Speaker at location 2023-10-07T16:20:00+02:00 16:20 00:10 This tool will assess how well different hardware setups support platform security features like D-RTM, S-RTM, Intel Boot Guard, AMD Platform Secure Boot, and UEFI Secure Boot, and how they align with Qubes OS security standards. In the future parts of the tools or results reported by it could be presented directly within the Qubes OS User Interface, so users can easily understand the security readiness of their system. Through this session, we hope to take a step towards making security assessment more accessible and straightforward for all Qubes OS users both at the stage of evaluating potential hardware targets as well as for comparison between various vendors. qubes-os-summit-2023-51-creating-a-tool-to-check-platform-security-features-for-qubes-os Piotr Król en false PDF Presentation https://cfp.3mdeb.com/qubes-os-summit-2023/talk/VZUADD/ https://cfp.3mdeb.com/qubes-os-summit-2023/talk/VZUADD/feedback/ Social Hub Main Room Speaker at location 2023-10-07T16:40:00+02:00 16:40 01:10 Platform Security Design Session qubes-os-summit-2023-56-platform-security-design-session Design session Piotr Król en false https://cfp.3mdeb.com/qubes-os-summit-2023/talk/HB7WHQ/ https://cfp.3mdeb.com/qubes-os-summit-2023/talk/HB7WHQ/feedback/ Social Hub Main Room Speaker at location 2023-10-07T17:55:00+02:00 17:55 00:05 Closing notes qubes-os-summit-2023-49-qubes-os-summit-2023-day-2-closing-notes Piotr Król en false https://cfp.3mdeb.com/qubes-os-summit-2023/talk/WWFHWC/ https://cfp.3mdeb.com/qubes-os-summit-2023/talk/WWFHWC/feedback/ Social Hub Main Room Speaker at location 2023-10-08T10:00:00+02:00 10:00 03:40 Hackathon qubes-os-summit-2023-58-hackathon en false https://cfp.3mdeb.com/qubes-os-summit-2023/talk/NACHFG/ https://cfp.3mdeb.com/qubes-os-summit-2023/talk/NACHFG/feedback/ Social Hub Main Room Speaker at location 2023-10-08T13:50:00+02:00 13:50 01:00 Lunch break qubes-os-summit-2023-57-lunch-break Break en false https://cfp.3mdeb.com/qubes-os-summit-2023/talk/KD9AM7/ https://cfp.3mdeb.com/qubes-os-summit-2023/talk/KD9AM7/feedback/ Social Hub Main Room Speaker at location 2023-10-08T15:00:00+02:00 15:00 03:00 Hackathon qubes-os-summit-2023-59-hackathon en false https://cfp.3mdeb.com/qubes-os-summit-2023/talk/SWM9AW/ https://cfp.3mdeb.com/qubes-os-summit-2023/talk/SWM9AW/feedback/