bluetooth support in dom0

[danf...@gmail.com]

Hello,

Is there any simple step-by-step way to get my laptop's built in bluetooth working for mouse and headphones, to use in dom0 across all VMs?

I don't know much about the security side of things, but I'm happy to blindly ignore any "in my local neighbourhood" kind of attacks if that was the only issue.

Or should I be avoiding Qubes if I can't figure this stuff out myself? ;)

I'm just an amateur Linux user mildly interested in increased security/privacy.

Side musing: Have the developers considered allowing *optional* support for things that have security issues, in the spirit of compromise...? For instance, I absolutely do choose convenience and even necessity over security (to the tune of bluetooth, full graphics card support for game dev work), yet wouldn't there still be something to be gained by using Qubes even with those security holes? When the choice is Qubes with these holes vs just any regular Linux distro.

[Joanna Rutkowska]

On 03/12/14 22:27, danf...@gmail.com wrote:
> Hello,
>
> Is there any simple step-by-step way to get my laptop's built in
> bluetooth working for mouse and headphones, to use in dom0 across all
> VMs?
>

We don't really want BT stack in Dom0...

> I don't know much about the security side of things, but I'm happy to
> blindly ignore any "in my local neighbourhood" kind of attacks if
> that was the only issue.
>

Why not use Windows then? Or Mac? :)

> Or should I be avoiding Qubes if I can't figure this stuff out
> myself? ;)
>
> I'm just an amateur Linux user mildly interested in increased
> security/privacy.
>
> Side musing: Have the developers considered allowing *optional*
> support for things that have security issues, in the spirit of
> compromise...?

Qubes OS is an open platform, you can configure it however you like,
disabling potentially all security feature, if you really want. The user
is the ultimate boss.

> For instance, I absolutely do choose convenience and
> even necessity over security (to the tune of bluetooth, full graphics
> card support for game dev work), yet wouldn't there still be
> something to be gained by using Qubes even with those security holes?
> When the choice is Qubes with these holes vs just any regular Linux
> distro.
>

Modern Windows and OSX offer a "reasonable compromise" of security, I heard.

joanna.

[danf...@gmail.com]

>
> > I don't know much about the security side of things, but I'm happy to
>
> > blindly ignore any "in my local neighbourhood" kind of attacks if
>
> > that was the only issue.
>
> >
>
>
>
> Why not use Windows then? Or Mac? :)

Because they don't offer the other nice features such as the app domains and disposable VMs. Which I assume would still help against remote threats such as web browser exploits.

>
> > Or should I be avoiding Qubes if I can't figure this stuff out
>
> > myself? ;)
>
> >
>
> > I'm just an amateur Linux user mildly interested in increased
>
> > security/privacy.
>
> >
>
> > Side musing: Have the developers considered allowing *optional*
>
> > support for things that have security issues, in the spirit of
>
> > compromise...?
>
>
>
> Qubes OS is an open platform, you can configure it however you like,
>
> disabling potentially all security feature, if you really want. The user
>
> is the ultimate boss.
>

I should rephrase that as "easy to use", even GUI based, configurability. Perhaps you aren't targeting such "novice" users.

>
> > For instance, I absolutely do choose convenience and
>
> > even necessity over security (to the tune of bluetooth, full graphics
>
> > card support for game dev work), yet wouldn't there still be
>
> > something to be gained by using Qubes even with those security holes?
>
> > When the choice is Qubes with these holes vs just any regular Linux
>
> > distro.
>
> >
>
>
>
> Modern Windows and OSX offer a "reasonable compromise" of security, I heard.

Haha!

[crypt1c...@gmail.com]

Any update regarding this?

[raah...@gmail.com]

hahaha

[John Smith]

You manage to figure it out lol?

[raah...@gmail.com]

I'm sorry i was laughing at Joanna's comments. Do you mean how to enable it manually, or if Qubes is going to support it? I personally wouldn't want bluetooth either man.
Maybe you hold your phone too close to it one day haha. Or someone uses some booster outside your house to reach it who knows. i mean anything can happen and taking over dom0 is game over. defeats the purpose of using Qubes which tries to isolate hardware from dom0.

It is recommended to use usb with a computer that has the Qubes hardware requirements to be able to isolate the usb controllers from dom0.

[raah...@gmail.com]

or at least isolate a controller to dom0 dedicated to only your mouse and keyboard. Just don't use wireless.

[Rune Philosof]

On Wednesday, March 12, 2014 at 4:40:16 PM UTC-6, danf...@gmail.com wrote:

> Any update regarding this?

I have chosen to do this, it is a terrible downgrade of security from a normal Qubes system, but I think it is better than the alternative of using Ubuntu.
In my case I am also not using the usb cube. Also, this is on a Qubes 4.0rc3 system.

In a dom0 terminal:
```
qubes-dom0-update blueman
systemctl enable bluetooth
```

Then reboot the computer.

[Rune Philosof]

On Monday, January 8, 2018 at 10:06:29 AM UTC+1, Rune Philosof wrote:
> On Wednesday, March 12, 2014 at 4:40:16 PM UTC-6, danf...@gmail.com wrote:
> > Any update regarding this?
>
> I have chosen to do this, it is a terrible downgrade of security from a normal Qubes system, but I think it is better than the alternative of using Ubuntu.
> In my case I am also not using the usb cube. Also, this is on a Qubes 4.0rc3 system.

I just started using sys-usb. Follow https://www.qubes-os.org/doc/usb/#how-to-use-a-usb-keyboard and the mouse part if you need that. Do `sudo dnf install blueman` in the sys-usb templateVM (probably fedora-26), shut it and sys-usb down. Then start sys-usb again.
You should now see a bluetooth applet.

[Desobediente]

So I've gone through all the trouble installing blueman and exposing my hypervisor to all the building.

I have found out that bluetooth headphones operate at 2.4ghz which happens to be the same frequency as my Dell's wireless card. So if you attempt to listen to music via youtube, evntually the internet connection will become unusable, as the latency of the sound reaching your head.

I would suggest everyone wanting to use wireless mouses to stick to those with an usb dongle. I don't recommend using wireless keyboards at all, but if you do, use one with an usb dongle and don't use the internal laptop bluetooth card.

As for bluetooth headphones, those things are only good for listening to your smartphone's music when you're in the bus. Or listening to music while you're walking, which will probably lead to you getting run over by a car.
Just stick to wired headphones. If you want to move more freely, use a p2 extension for the audio cable.

Conclusion: there's still no good reason at all to activate bluetooth on dom0.

[Desobediente]

PS: And since what I said is not specific to Qubes, there doesn't seem to be a good reason to use the internal laptop bluetooth in any operational system at all.