- Prevent Qubes OS clearnet leaks - #43 by OvalZero > by default appvms connected to clearnet sys-firewall / sys-net will fetch updates from qubes repository, any ISP can see qubes OS is being used
- How to hide the fact that I'm Qubes OS from Telegram - #74 by Qubie > by default any software running will clearly see “Qubes” as the xen hypervisor
- Changing time zone on qubes > during qubes os install you select your time zone. that time zone will leak into every appvm or standalone qube even if they are connected to sys-whonix. lets say you’re from vienna, when you browse a website (any browser except tor-browser) the javascript can see the local time of the browser’s machine, leaking your real geographical location even if you are in appvm using vpn or tor.
its not just default behavior, there is no recognizement whatsoever of the implications of these privacy leaks. If you care you have to take care them by yourself.
@unman said the time sync fetching from sys-net can also be used to fingerprint Qubes OS, although I don’t see how that is possible; he never replied to people seeking further explanation. Just goes to show how much the Qubes OS team gives a F* about privacy stuff.