I value anonymity when using Qubes.
If I use my real name as my user name when installing, will there be any privacy issues?
Or is there any particular problem with using my real name as my user name?
nokke
June 29, 2024, 2:00pm
2
Is there any benefit to using your real name?
It’s not the easiest thing to change later, fyi.
1 Like
I always install with the dom0 username set to “user”, which also happens to be the default for the VM username.
It’s visible on the screen locker. And there’s this minor issue:
opened 06:00PM - 14 Apr 23 UTC
T: enhancement
C: core
privacy
P: default
### Qubes OS release
Any
### Brief summary
If a backup is created (with… the Qubes Backup GUI or the `qvm-backup` CLI) that includes the dom0 home, the backup file contains the dom0 username in cleartext.
Although this username is already not treated as confidential information in a local context - it's displayed on the default X11 lockscreen - putting it into a backup file can unnecessarily link the file to somebody who e.g. uploaded it anonymously to a cloud storage provider.
The username should be replaced, similar to how the unencrypted outer layer of the backup file replaces a VM's name by the fixed string `vm` + the VM's numerical `qid` property. The restore code would still be able to get the real username from the innermost (encrypted) tar archive, or it could be added to the (also encrypted) `qubes.xml` if that's easier to implement.
### Steps to reproduce
$ whoami
foo
$ qvm-backup backupfile dom0
$ tar -itf backupfile
### Expected behavior
`tar` printing something like
dom0-home/user.000.enc
### Actual behavior
dom0-home/foo.000.enc
3 Likes