Is kicksecure still supposed to be causing lots of error messages when whonix is not being used. I thought that kicksecure was for security without tor and whonix was for tor. If i try and use kicksecure without whonix i get lots of error messages related to sdwdate. Qubes 4.3rc3.
What is the most secure browser experience. I was going to use firefox with kicksecure but without tor involved. Is that my best bet.
Thanks for any advice
This is what the Kicksecure for Qubes Wiki says;
"How stable is this? "
It should be very stable. This is because Qubes-Whonix is based on Kicksecure.
The lead developer of Kicksecure is also a user of Qubes and uses Kicksecure in Qubes.
According to my knowledge it’s supposed to be able to run without Whonix as Whonix runs on top of kicksecure normally.
For the best browser experience run the Mullvad browser.
The Mullvad browser was developed in collaboration between the Tor Project and Mullvad VPN.
It’s basically the TOR browser but for VPN and also security hardened.
There’s also a new identity function in the browser.
If you run it together with Mullvad VPN you can take advantage of the proxy settings,
meaning you can use a different proxy for every website you want.
It will save these settings in a nice menu.
PS. I have time issues too with all my qubes.
SDWDate is being depreciated as far as I know.
The nice little lock on the panel being unlocked all the time or spitting strange errors was enough for me to just remove it. I think many of the whonix mitigations are not applicable to qubes (live mode, SDWdate, cpu-mitigations etc… ) and actually can cause a lot of unstability (errors seen on kicksecure installations)
IMHO, If you really want to have a “secure” qube, a very minimal debian or fedora is a better choice, then learn to do it the ‘qubes-way’ ie let qubes do its thing with proper firewall / networking rules, disposables, template management etc… Just my 2 cents. I am sure a lot here will disagree with me, and the qubes team obviously integrates whonix into it for a reason. I just found it overkill and messy.
Thanks for the replies.
Honestly I think Qubes is great, but it does kind of make me a bit paranoid at times and the reality is that I dont need to be this paranoid so I am trying to dial things back a little bit. I am using 4.3 rc3 at the moment and preloaded qubes are such a great feature that I am now browsing with a disposable qube with a minimal template and the reality is, its probably way more secure than I need.
If SDWDate is going to be removed then I suspect it will not be before 18 (I might be wrong) but I just hate all the error messages that pop up when i start it. I dont want to use TOR for my needs but a kicksecure qube with firefox and all the anti tracking stuff would be great. But I will use debian minimum template and probably arkenfox some time soon.
Thanks Again
Yep, arkenfox is great, librewolf etc… They wanted to bundle whonix as an idiot-proof solution. If you want to dive off the deep end, try openBSD or the alpinelinux vms. Your free in qubes to do what you want! If you fail, just delete it all and try again! I am all for minimalism myself and I dont use whonix or any non-minimal qubes. But don’t be afraid of making mistakes and in my experience there are no shortcuts. I try to only have what i need and try to do it the most most minimal way possible. I wish I could do most of it on Unikernels in the end… Qubes is fantastic in this way, if you fail, just delete it all and start again!
ps… I should give a shoutout to @unman, who really helped me a lot on my qubes Journey.
his 3isec and notes helped me so much
No.