Can you create a Reddit account and use it as if you weren't using the Qubes operating system?

Please answer that i would really aprecciate it

1 Like

Hi @asmdmc5
it’s not clear, whom do you ask?
As a qubes user, you create a reddit account inside a Qube (a VM). This VM has a OS (fedora, debian, whonix, whatever). So the other side can only retrive, what OS you use inside that VM (if thats possible). If you do not reveal it, no one can see, that you use Qubes (execept some very elaborate and complex statistical analysis of your network traffic).

1 Like

By check kernel version you can find that this AppVM related to QubesOS, unless you use debian/fedora distribution kernel in pvh or hvm mode.

@asmdmc5
I see 2 solutions:

  1. Hardening of your browser to prevent fingerprint it as running in AppVM.
  2. Use AppVM with Debian/Fedora distribution kernel from web surfing
1 Like

Yeah, you are right, i forgot the qubes kernel, that is shared used in all VMs. So your recommendations are correct.

1 Like

There is few more hacks to find that AppVM is not a independent desktop, but as long as I know kernel version is what leaked in case of Reddit block access to it at default configuration.

1 Like

Use my mullvad-browser salt files and tell me if reddit can detect if you’re using Qubes OS (the debian apparmor salt) you can find them here

The installation will automatically setup & install apparmor + mullvad browser apparmor profile from my repo reddit shouldn’t detect you as a Qubes users i removed access in the browser to such info in the apparmor profile

To use the salt files read my post here once the installation is finished (should take at best 5-6 minutes) go to the boot mode choice in the appvm and use “secureblue” boot mode

From my testing with the apparmor mullvad-browser.sls website doesn’t detect me as a Qubes users with my setup


The screenshot are coming from https://www.whatismybrowser.com/ and Version Checker - mdigi.tools

I think if these websites don’t see me as a Qubes user reddit couldn’t see you too

1 Like

I’m not clear on OP’s issue - have Qubes users found themselves blocked from Reddit?

Im able to use it fine, across a handful of different browsers. Usually from a dvm based on fedora xfce template, sometimes whonix. The only usability issue has been some JS blocking I have configured by default

2 Likes

The issue is about obfuscating information from the browser that would lead to revealing Qubes OS’ usage, which primarily circles around the concept of browser fingerprinting. Qubes-Whonix is sufficient enough to address it, but Reddit may block Tor Browser users from accessing their website and/or creating accounts, among other websites.

1 Like

AFAIK there is no browser JavaScript API a website like Reddit can leverage in order to query specific system kernel version.

Hence this question is more about browser fingerprinting in general, and not specific to Qubes.

You can play with querying navigator.xxx properties in browser console to see, what is possible. Browsers like Firefox, Librewolf all showed generic Linux x86/64 as operating system for me.

1 Like

Same web security or advertising companies offer such integration:

I unable to find cve, cwe of another professional source to proof leak of kernel version in firefox, but don’t have a time for deep research how exactly it happens.

1 Like