Thunderbird: "Open link in DispVM"
201 views
Skip to first unread message
Robert Mittendorf
Sep 23, 2016, 9:53:14 PM9/23/16
to qubes-users
Hello everyone,
working with Qubes I think it is a good idea to open links from mails (Thunderbird) in a DispVM.
This way you can open "verify registration" links without having the need to allow full internet access to the mail VM or using cross-VM c&p.
I thought about writing a Thunderbird extension, but in fact it is even easier to do that. In settings-> attachments -> receive (or similar, I don't use the English Thunderbird version) you can set handlers for http, https and ftp.
I could not figure out how to handle parameters properly, so I wrote a small "script";
Thunderbird calls (you dont need to enter the %url% string, it is appended automatically)
run_dispFox.sh %url%
This script utilizes the cubes tools by calling
/usr/bin/qvm-run --dispvm firefox $1
and Firefox opens up in a DispVM.
Now mail VM only needs access to the webserver and the update-servers of the thunderbird add-ons (usually AMO).
BUT: I can only open up 1 URL at a time. If there is an DispVM with Firefox already, the URL will not be opened in Firefox in a DispVM (not in the existing window and not in a new one).
working with Qubes I think it is a good idea to open links from mails (Thunderbird) in a DispVM.
This way you can open "verify registration" links without having the need to allow full internet access to the mail VM or using cross-VM c&p.
I thought about writing a Thunderbird extension, but in fact it is even easier to do that. In settings-> attachments -> receive (or similar, I don't use the English Thunderbird version) you can set handlers for http, https and ftp.
I could not figure out how to handle parameters properly, so I wrote a small "script";
Thunderbird calls (you dont need to enter the %url% string, it is appended automatically)
run_dispFox.sh %url%
This script utilizes the cubes tools by calling
/usr/bin/qvm-run --dispvm firefox $1
and Firefox opens up in a DispVM.
Now mail VM only needs access to the webserver and the update-servers of the thunderbird add-ons (usually AMO).
BUT: I can only open up 1 URL at a time. If there is an DispVM with Firefox already, the URL will not be opened in Firefox in a DispVM (not in the existing window and not in a new one).
--
M. Sc. Informatik Robert Mittendorf
DigiTrace GmbH - Kompetenz in IT-Forensik
Geschäftsführer: Alexander Sigel, Martin Wundram
Registergericht Köln, HR B 72919
USt-IdNr: DE278529699
Zollstockgürtel 59, 50969 Köln
Telefon: 0221-6 77 86 95-2
Website: www.DigiTrace.de
E-Mail: in...@DigiTrace.de
Haben Sie schon den DigiTrace-Newsletter abonniert?
http://www.digitrace.de/de/service/newsletter
DigiTrace ist Partner der Allianz für Cyber-Sicherheit
sowie Mitglied im nrw.units Netzwerk für IT-Sicherheit:
https://www.allianz-fuer-cybersicherheit.de
http://www.nrw-units.de/netzwerk/
M. Sc. Informatik Robert Mittendorf
DigiTrace GmbH - Kompetenz in IT-Forensik
Geschäftsführer: Alexander Sigel, Martin Wundram
Registergericht Köln, HR B 72919
USt-IdNr: DE278529699
Zollstockgürtel 59, 50969 Köln
Telefon: 0221-6 77 86 95-2
Website: www.DigiTrace.de
E-Mail: in...@DigiTrace.de
Haben Sie schon den DigiTrace-Newsletter abonniert?
http://www.digitrace.de/de/service/newsletter
DigiTrace ist Partner der Allianz für Cyber-Sicherheit
sowie Mitglied im nrw.units Netzwerk für IT-Sicherheit:
https://www.allianz-fuer-cybersicherheit.de
http://www.nrw-units.de/netzwerk/
Clark Venable
Sep 24, 2016, 5:02:08 PM9/24/16
to qubes-users, mitte...@digitrace.de
Have you seen this?
https://micahflee.com/2016/07/how-qubes-makes-handling-pdfs-way-safer/
Clark
Robert Mittendorf
Sep 26, 2016, 4:30:33 AM9/26/16
to Clark Venable, qubes-users
Hey Clark,
the article which you referenced to is about opening (and converting)
PDF documents. My idea is about opening URLs (Links) in a DispVM. I
think that is not related in any way, is it?
Robert
btw: did you notice, that googlegroups blocks email having a subject
starting with a quote (single ' or double ") ? I - I sent this email 4
times over several days.....
the article which you referenced to is about opening (and converting)
PDF documents. My idea is about opening URLs (Links) in a DispVM. I
think that is not related in any way, is it?
Robert
btw: did you notice, that googlegroups blocks email having a subject
starting with a quote (single ' or double ") ? I - I sent this email 4
times over several days.....
Andrew David Wong
Sep 26, 2016, 5:40:48 PM9/26/16
to Robert Mittendorf, Clark Venable, qubes-users
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
On 2016-09-26 01:30, Robert Mittendorf wrote:
> Hey Clark,
>
> the article which you referenced to is about opening (and converting) PDF documents. My idea is about opening URLs (Links) in a DispVM. I think that is not related in any way, is it?
>
> Robert
>
Robert,
Your emails got caught in the spam filter. I'm sorry
about that. I approved only one of them (rather than
all 4-5) because I figured your intention was to send
the message to the list only once. You should be added
to the whitelist now.
P.S. - Please try to avoid top-posting.
> btw: did you notice, that googlegroups blocks email having a subject starting with a quote (single ' or double ") ? I - I sent this email 4 times over several days.....
>
> Am 09/24/2016 um 11:02 PM schrieb Clark Venable:
>> Have you seen this?
>>
>> https://micahflee.com/2016/07/how-qubes-makes-handling-pdfs-way-safer/
>>
>> Clark
>
- --
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
-----BEGIN PGP SIGNATURE-----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=IEXM
-----END PGP SIGNATURE-----
Hash: SHA512
On 2016-09-26 01:30, Robert Mittendorf wrote:
> Hey Clark,
>
> the article which you referenced to is about opening (and converting) PDF documents. My idea is about opening URLs (Links) in a DispVM. I think that is not related in any way, is it?
>
> Robert
>
Your emails got caught in the spam filter. I'm sorry
about that. I approved only one of them (rather than
all 4-5) because I figured your intention was to send
the message to the list only once. You should be added
to the whitelist now.
P.S. - Please try to avoid top-posting.
> btw: did you notice, that googlegroups blocks email having a subject starting with a quote (single ' or double ") ? I - I sent this email 4 times over several days.....
>
> Am 09/24/2016 um 11:02 PM schrieb Clark Venable:
>> Have you seen this?
>>
>> https://micahflee.com/2016/07/how-qubes-makes-handling-pdfs-way-safer/
>>
>> Clark
>
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
-----BEGIN PGP SIGNATURE-----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=IEXM
-----END PGP SIGNATURE-----
Clark Venable
Sep 26, 2016, 5:45:13 PM9/26/16
to qubes-users, jcl...@gmail.com, mitte...@digitrace.de
Robert,
You are right. I misread your post as referring to attachments rather than links. Sorry about that.
Clark
Robert Mittendorf
Sep 29, 2016, 9:30:37 AM9/29/16
to qubes...@googlegroups.com
It seems like this issue was fixed in current 3.2 testing build. I can
open more than 1 url at a time from Thunderbird now.....
open more than 1 url at a time from Thunderbird now.....
Reply all
Reply to author
Forward
0 new messages