Symfony Profiler

[
  "entry" => App\Entity\Entry {#1917
    +user: Proxies\__CG__\App\Entity\User {#1946
      +avatar: null
      +cover: null
      +email: "maltfield@monero.town"
      +username: "@maltfield@monero.town"
      +roles: []
      +followersCount: 0
      +homepage: "front"
      +about: """
        I make and sell [BusKill laptop kill cords](https://buskill.in). Monero is accepted.\n
        \n
        [michaelaltfield.net](https://michaelaltfield.net)
        """
      +lastActive: DateTime @1727484173 {#3155
        date: 2024-09-28 02:42:53.0 +02:00
      }
      +markedForDeletionAt: null
      +fields: null
      +oauthGithubId: null
      +oauthGoogleId: null
      +oauthFacebookId: null
      +oauthKeycloakId: null
      +hideAdult: true
      +showSubscribedUsers: true
      +showSubscribedMagazines: true
      +showSubscribedDomains: true
      +preferredLanguages: []
      +featuredMagazines: null
      +showProfileSubscriptions: false
      +showProfileFollowings: true
      +markNewComments: false
      +notifyOnNewEntry: false
      +notifyOnNewEntryReply: true
      +notifyOnNewEntryCommentReply: true
      +notifyOnNewPost: false
      +notifyOnNewPostReply: true
      +notifyOnNewPostCommentReply: true
      +addMentionsEntries: false
      +addMentionsPosts: true
      +isBanned: false
      +isVerified: false
      +isDeleted: false
      +isBot: false
      +spamProtection: true
      +customCss: null
      +ignoreMagazinesCustomCss: false
      +moderatorTokens: Doctrine\ORM\PersistentCollection {#3160 …}
      +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#3163 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#3165 …}
      +entries: Doctrine\ORM\PersistentCollection {#3167 …}
      +entryVotes: Doctrine\ORM\PersistentCollection {#3169 …}
      +entryComments: Doctrine\ORM\PersistentCollection {#3171 …}
      +entryCommentVotes: Doctrine\ORM\PersistentCollection {#3185 …}
      +posts: Doctrine\ORM\PersistentCollection {#3176 …}
      +postVotes: Doctrine\ORM\PersistentCollection {#3199 …}
      +postComments: Doctrine\ORM\PersistentCollection {#3220 …}
      +postCommentVotes: Doctrine\ORM\PersistentCollection {#3251 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#3208 …}
      +subscribedDomains: Doctrine\ORM\PersistentCollection {#3260 …}
      +follows: Doctrine\ORM\PersistentCollection {#3263 …}
      +followers: Doctrine\ORM\PersistentCollection {#3258 …}
      +blocks: Doctrine\ORM\PersistentCollection {#3286 …}
      +blockers: Doctrine\ORM\PersistentCollection {#3282 …}
      +blockedMagazines: Doctrine\ORM\PersistentCollection {#3299 …}
      +blockedDomains: Doctrine\ORM\PersistentCollection {#3303 …}
      +reports: Doctrine\ORM\PersistentCollection {#3287 …}
      +favourites: Doctrine\ORM\PersistentCollection {#3309 …}
      +violations: Doctrine\ORM\PersistentCollection {#3316 …}
      +notifications: Doctrine\ORM\PersistentCollection {#3318 …}
      +awards: Doctrine\ORM\PersistentCollection {#3310 …}
      +subscribedCategories: Doctrine\ORM\PersistentCollection {#3327 …}
      +categories: Doctrine\ORM\PersistentCollection {#3340 …}
      -id: 53233
      -password: "$2y$13$ONerzxs5ikSMZPP7JZz93.L7bi7bpix5PvgJJmsqWoSIfRo3rR8JO"
      -totpSecret: null
      -totpBackupCodes: []
      -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#3351 …}
      +apId: "maltfield@monero.town"
      +apProfileId: "https://monero.town/u/maltfield"
      +apPublicUrl: "https://monero.town/u/maltfield"
      +apFollowersUrl: null
      +apInboxUrl: "https://monero.town/inbox"
      +apDomain: "monero.town"
      +apPreferredUsername: "maltfield"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: false
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1711292170 {#3152
        date: 2024-03-24 15:56:10.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1696724832 {#3154
        date: 2023-10-08 02:27:12.0 +02:00
      }
      +__isInitialized__: true
       …2
    }
    +magazine: App\Entity\Magazine {#316
      +icon: null
      +name: "privacyguides@lemmy.one"
      +title: "privacyguides"
      +description: """
        *In the digital age, protecting your personal information might seem like an impossible task. We’re here to help.*\n
        \n
        This is a community for sharing news about privacy, posting information about cool privacy tools and services, and getting advice about your privacy journey.\n
        \n
        ---\n
        \n
        You can subscribe to this community from any Kbin or Lemmy instance:\n
        \n
        - [Subscribe on Kbin.social](https://kbin.social/m/privacyguides@lemmy.one)\n
        - [Subscribe on Lemmy.one](https://lemmy.one/c/privacyguides)\n
        - [Subscribe on Lemmy.ml](https://lemmy.ml/c/privacyguides@lemmy.one)\n
        - [Subscribe on Beehaw.org](https://beehaw.org/c/privacyguides@lemmy.one)\n
        \n
        [Learn more…](https://lemmy.one/post/355)\n
        \n
        ---\n
        \n
        Check out our website at [privacyguides.org](https://www.privacyguides.org) before asking your questions here. We’ve tried answering the common questions and recommendations there!\n
        \n
        Want to get involved? The website is [open-source on GitHub](https://github.com/privacyguides/privacyguides.org), and your help would be appreciated!\n
        \n
        ---\n
        \n
        **This community is the “official” Privacy Guides community on Lemmy, which can be [verified here](https://www.reddit.com/r/PrivacyGuides/comments/13x7oe3/who_wants_to_try_out_lemmy_privacyguideslemmyone/). Other “Privacy Guides” communities on other Lemmy servers are not moderated by this team or associated with the website.**\n
        \n
        ---\n
        \n
        **Moderation Rules:**\n
        \n
        1. We prefer posting about open-source software whenever possible.\n
        2. This is not the place for self-promotion if you are not listed on privacyguides.org. If you want to be listed, [make a suggestion on our forum first](https://discuss.privacyguides.net/c/site-development/suggestions/6).\n
        3. No soliciting engagement: Don’t ask for upvotes, follows, etc.\n
        4. Surveys, Fundraising, and Petitions must be **pre**-approved by the mod team.\n
        5. Be civil, no violence, hate speech. Assume people here are posting in good faith.\n
        6. Don’t repost topics which have already been covered here.\n
        7. News posts must be related to privacy and security, and **your post title must match the article headline exactly.** Do not editorialize titles, you can post your opinions in the post body or a comment.\n
        8. Memes/images/video posts that could be summarized as text explanations should not be posted. Infographics and conference talks from reputable sources are acceptable.\n
        9. **No help vampires:** This is not a tech support subreddit, don’t abuse our community’s willingness to help. Questions related to privacy, security or privacy/security related software and their configurations are acceptable.\n
        10. No misinformation: Extraordinary claims must be matched with **evidence.**\n
        11. Do not post about VPNs or cryptocurrencies which are not listed on [privacyguides.org](https://www.privacyguides.org/en/tools/). See Rule 2 for info on adding new recommendations to the website.\n
        12. General guides or software lists are not permitted. Original sources and research about specific topics are allowed as long as they are high quality and factual. **We are not providing a platform for poorly-vetted, out-of-date or conflicting recommendations.**\n
        \n
        ---\n
        \n
        Additional Resources:\n
        \n
        - [EFF: Surveillance Self-Defense](https://ssd.eff.org/)\n
        - [Consumer Reports Security Planner](https://securityplanner.consumerreports.org/)\n
        - [Jonah Aragon](https://www.jonaharagon.com) ([YouTube](https://youtube.com/@jonaharagon))\n
        - [r/Privacy](https://www.reddit.com/r/Privacy)\n
        - [Big Ass Data Broker Opt-Out List](https://github.com/yaelwrites/Big-Ass-Data-Broker-Opt-Out-List)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 259
      +entryCommentCount: 2490
      +postCount: 5
      +postCommentCount: 29
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729537882 {#324
        date: 2024-10-21 21:11:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#304 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#300 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#289 …}
      +entries: Doctrine\ORM\PersistentCollection {#247 …}
      +posts: Doctrine\ORM\PersistentCollection {#205 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#267 …}
      +bans: Doctrine\ORM\PersistentCollection {#184 …}
      +reports: Doctrine\ORM\PersistentCollection {#170 …}
      +badges: Doctrine\ORM\PersistentCollection {#148 …}
      +logs: Doctrine\ORM\PersistentCollection {#138 …}
      +awards: Doctrine\ORM\PersistentCollection {#127 …}
      +categories: Doctrine\ORM\PersistentCollection {#114 …}
      -id: 39
      +apId: "privacyguides@lemmy.one"
      +apProfileId: "https://lemmy.one/c/privacyguides"
      +apPublicUrl: "https://lemmy.one/c/privacyguides"
      +apFollowersUrl: "https://lemmy.one/c/privacyguides/followers"
      +apInboxUrl: "https://lemmy.one/inbox"
      +apDomain: "lemmy.one"
      +apPreferredUsername: "privacyguides"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729576084 {#325
        date: 2024-10-22 07:48:04.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1696630878 {#319
        date: 2023-10-07 00:21:18.0 +02:00
      }
    }
    +image: Proxies\__CG__\App\Entity\Image {#2412 …}
    +domain: Proxies\__CG__\App\Entity\Domain {#1794 …}
    +slug: "QubesOS-Disarm-BusKill-Dead-Man-Switch-with-Keyboard-Shortcut-Guide"
    +title: "[QubesOS] Disarm BusKill Dead Man Switch with Keyboard Shortcut (Guide)"
    +url: "https://www.buskill.in/qubes-disarm/"
    +body: """
      This article describes how to setup keyboard shortcuts in QubesOS so that you can temporarily disarm (pause) the BusKill laptop kill cord.\n
      \n
      This allows the user to, for example, go to the bathroom without causing their computer to shutdown or self-destruct.\n
      \n
      [![Arm  Disarm BusKill in QubesOS](https://www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_featuredImage.jpg)](https://buskill.in/qubes-disarm)\n
      \n
      This is a guide that builds on part one: [A Laptop Kill Cord for QubesOS (1/2)](/qubes-os/). Before reading this, you should already be familiar with how to [setup udev rules for BusKill on QubesOS](https://www.buskill.in/qubes-os/).\n
      \n
      1. [A Laptop Kill Cord for QubesOS (1/2)](/qubes-os/)\n
      2. Disarm BusKill in QubesOS (2/2)\n
      \n
      > ⓘ Note: This post is adapted from its original [article on Tom Hocker's blog](https://humandecoded.io/qubes-os-yubikey-buskill/).\n
      \n
      What is BusKill?\n
      ================\n
      \n
      > What if someone literally steals your laptop while you're working with classified information inside a Whonix DispVM? They'd also be able to recover data from previous DispVMs--as Disposable VM's rootfs virtual files are *not* securely shredded after your DispVM is destroyed.\n
      \n
      Are you a security researcher, journalist, or intelligence operative that works in QubesOS--exploiting Qubes' [brilliant security-through-compartimentalization](https://freedom.press/news/the-operating-system-that-can-protect-you-even-if-you-get-hacked/)to keep your data safe? Do you make use of Whonix [Disposable VMs](https://www.qubes-os.org/doc/disposablevm/) for your work? Great! This post is for you.\n
      \n
      I'm sure your QubesOS laptop has Full Disk Encryption and you're using a strong passphrase. But what if someone literally steals your laptop while you're working with classified information inside a Whonix DispVM? Not only will they get access to all of your AppVM's private data and the currently-running Whonix DispVM's data, but there's a high chance they'd be able to recover data from [previous DispVMs](https://www.whonix.org/wiki/Qubes/DisposableVM#Warnings)--as **Disposable VM's rootfs virtual files ([volatile.img](https://groups.google.com/forum/#!topic/qubes-devel/QwL5PjqPs-4/discussion)) are [*not* securely shredded](https://github.com/QubesOS/qubes-issues/issues/904) after your DispVM is destroyed** by Qubes!\n
      \n
      Let's say you're a journalist, activist, whistleblower, or a human rights worker in an oppressive regime. Or an intelligence operative behind enemy lines doing research or preparing a top-secret document behind a locked door. What do you do to protect your data, sources, or assets when the secret police suddenly batter down your door? How quickly can you *actually* act to shutdown your laptop and shred your RAM and/or FDE encryption keys?\n
      \n
      | [![BusKill Demo](https://www.buskill.in/wp-content/uploads/sites/8/2020/02/busKillDemo.mp4)](https://www.buskill.in/#demo) |\n
      |---|\n
      | *Watch the [BusKill Explainer Video](https://www.buskill.in/#demo) for more info [youtube.com/v/qPwyoD_cQR4](https://www.youtube.com/v/qPwyoD_cQR4)* |\n
      \n
      BusKill utilizes a magnetic trip-wire that tethers your body to your laptop. If you suddenly jump to your feet or fall off your chair (in response to the battering ram crashing through your door) or your laptop is ripped off your table by a group of armed thugs, the data bus' magnetic connection will be severed. This event causes a configurable *trigger* to execute.\n
      \n
      The BusKill `trigger` can be anything from:\n
      \n
      1. locking your screen or\n
      2. shutting down the computer or\n
      3. initiating a [self-destruct](/luks-self-destruct/) sequence\n
      \n
      While our [last post](qubes-os) described how to setup such a system in QubesOS with BusKill, *this* post will describe how to add keyboard shortcuts to arm & disarm the dead man switch (eg so you can go to the bathroom).\n
      \n
      Disclaimer\n
      ==========\n
      \n
      This guide contains experimental files, commands, and software. The information contained in this article may or may not lead to corruption or total permanent deletion of some or all of your data. We've done our best to carefully guide the user so they know the risks of each BusKill trigger, but we cannot be responsible for any data loss that has occurred as a result of following this guide.\n
      \n
      The contents of this guide is provided openly and is licensed under the [CC-BY-SA](https://creativecommons.org/licenses/by-sa/4.0/) license. The software included in this guide is licensed under the [GNU GPLv3](https://www.gnu.org/licenses/gpl-3.0.html) license. All content here is consistent with the limitations of liabilities outlined in its respective licenses.\n
      \n
      We highly recommend that any experiments with the scripts included in this article are used exclusively on a disposable machine containing no valuable data.\n
      \n
      If data loss is a concern for you, then leave now and do not proceed with following this guide. You have been warned.\n
      \n
      Release Note\n
      ------------\n
      \n
      Also be aware that, due to the risks outlined above, BusKill will *not*be released with this "self-destruct" trigger.\n
      \n
      If you [purchase](/buy)a BusKill cable, it will only ship with non-destructive triggers that lock the screen or shutdown the computer. Advanced users can follow guides to add additional destructive triggers, such as the one described in this post, but they should do so at their own risk--taking carefully into consideration all of the warnings outlined above and throughout this article.\n
      \n
      **Again, if you [buy](/buy) a BusKill cable, the worst that can happen is your computer will abruptly shutdown.**\n
      \n
      Assumptions\n
      ===========\n
      \n
      This guide necessarily makes several assumptions outlined below.\n
      \n
      sys-usb\n
      -------\n
      \n
      In this guide, we assume that your QubesOS install has a [USB-Qube](https://www.qubes-os.org/doc/usb-qubes/) named '`sys-usb`' for handling [USB events](https://www.qubes-os.org/doc/usb-devices/) on behalf of `dom0`.\n
      \n
      If you decided to combine your USB and networking Qubes at [install time](https://www.qubes-os.org/doc/installation-guide/#initial-setup), then replace all references in this guide for '`sys-usb`' to '`sys-net`'.\n
      \n
      If you decided to run your '`sys-usb`' VM as a DispoableVM at [install time](https://github.com/QubesOS/qubes-issues/issues/6684#issuecomment-1435381919), then replace all references in this guide for '`sys-usb`' its Disposable TemplateVM (eg '`fedora-36-dvm`').\n
      \n
      …And if you chose not to isolate your USB devices, then [may god help you](https://blog.invisiblethings.org/2011/05/31/usb-security-challenges.html).\n
      \n
      Udev Device Matching\n
      --------------------\n
      \n
      BusKill in Linux uses [udev](https://en.wikipedia.org/wiki/Udev) to detect when the USB's cable is severed. The exact udev rule that you use in the files below will depend on the drive you choose to use in your BusKill cable.\n
      \n
      In this guide, we identify our BusKill-specific drive with the '`ENV{ID_MODEL}==“Micromax_A74”`' [udev property](https://wiki.archlinux.org/index.php/Udev#udev_rule_example). You should replace this property with one that matches your BusKill-specific drive.\n
      \n
      To determine how to query your USB drive for device-specific identifiers, see [Introducing BusKill: A Kill Cord for your Laptop](/buskill-laptop-kill-cord-dead-man-switch/#software). Note that the ``udevadm monitor --environment --udev`` command should be run in the '`sys-usb`' Qube.\n
      \n
      > ⓘ Note: If you'd prefer to buy a BusKill cable than make your own, you can buy one fully assembled [here](/buy).\n
      \n
      QubesOS Version\n
      ---------------\n
      \n
      This guide was written for QubesOS v4.1.\n
      \n
      ```\n
      \n
      <span style="color:#323232;">[user@dom0 ~]$ cat /etc/redhat-release Qubes release 4.1.2 (R4.1)\n
      </span><span style="color:#323232;">[user@dom0 ~]$\n
      </span>\n
      ```\n
      \n
      BusKill Files\n
      =============\n
      \n
      This section will describe what files should be created and where.\n
      \n
      Due to the design of QubesOS, it takes a bit of mental gymnastics to understand what we're doing and why. It's important to keep in mind that, in QubesOS\n
      \n
      1. The keyboard and UI are configured in '`dom0’`\n
      2. USB devices (like the BusKill device) are routed to the '`sys-usb`' VM\n
      3. dom0 has the privilege to execute scripts inside other VMs (eg '`sys-usb`')\n
      4. By design, VMs should *not* be able to send arbitrary commands to be executed in dom0\n
      5. .…but via the [qubes-rpc](https://www.qubes-os.org/doc/qrexec/#qubes-rpc-services), we *can* permit some VMs (eg '`sys-usb`') to execute a script in dom0 (though for security reasons, ideally such that no data/input is sent from the less-trusted VM to dom0 -- other than the name of the script)\n
      \n
      Due to the constraints listed above:\n
      \n
      1. We'll be configuring the disarm button as keyboard shortcut in dom0\n
      2. We'll be saving and executing the '`buskill-disarm.sh`' script in '`sys-usb`' (because these scripts manipulate our udev rules)\n
      3. The keyboard shortcut in dom0 will *actually* be executing the above script in '`sys-usb`'\n
      \n
      sys-usb\n
      -------\n
      \n
      If you followed our [previous guide to setting-up BusKill in QubesOS](/qubes-os/), then you should already have a file in '`sys-usb`' at '`/rw/config/buskill.rules`'. You may even have modified it to trigger a [LUKS Self-Destruct](/luks-self-destruct/) on removal of your BusKill device.\n
      \n
      Because you're *now* experimenting with a new setup, let's go ahead and wipe out that old file with a new one that *just* executes a soft-shutdown. You might need some days to get used to the new disarm procedure, and you probably don't want to suddenly loose all your data due to an accidental false-positive!\n
      \n
      Execute the following on your '`sys-usb`' Qube:\n
      \n
      ```\n
      \n
      <span style="color:#323232;">mv /rw/config/buskill.rules /rw/config/buskill.rules.bak.`date "+%Y%m%d_%H%M%S"`\n
      </span><span style="color:#323232;">cat &lt;&lt; EOF | sudo tee /rw/config/buskill.rules\n
      </span><span style="color:#323232;">################################################################################\n
      </span><span style="color:#323232;"># File:    sys-usb:/etc/udev/rules.d/buskill.rules -> /rw/config/buskill.rules\n
      </span><span style="color:#323232;"># Purpose: Add buskill rules. For more info, see: https://buskill.in/qubes-os/\n
      </span><span style="color:#323232;"># Authors: Michael Altfield \n
      </span><span style="color:#323232;"># Created: 2020-01-02\n
      </span><span style="color:#323232;"># License: GNU GPLv3\n
      </span><span style="color:#323232;">################################################################################\n
      </span><span style="color:#323232;">ACTION=="remove", SUBSYSTEM=="usb", ENV{ID_MODEL}=="Micromax_A74", RUN+="/usr/bin/qrexec-client-vm dom0 buskill.softShutdown"\n
      </span><span style="color:#323232;">EOF\n
      </span><span style="color:#323232;">sudo ln -s /rw/config/buskill.rules /etc/udev/rules.d/\n
      </span><span style="color:#323232;">sudo udevadm control --reload\n
      </span>\n
      ```\n
      \n
      Now, let's add a new udev '`.rules`' file. This one will always *just* lock your screen, and it's what will be put in-place when BusKill is "disarmed".\n
      \n
      Execute the following on your '`sys-usb`' Qube:\n
      \n
      ```\n
      \n
      <span style="color:#323232;">cat &lt;&lt; EOF | sudo tee /rw/config/buskill.lock.rules\n
      </span><span style="color:#323232;">################################################################################\n
      </span><span style="color:#323232;"># File:    sys-usb:/etc/udev/rules.d/buskill.rules -> /rw/config/buskill.lock.rules\n
      </span><span style="color:#323232;"># Purpose: Just lock the screen. For more info, see: https://buskill.in/qubes-os/\n
      </span><span style="color:#323232;"># Authors: Michael Altfield \n
      </span><span style="color:#323232;"># Created: 2023-05-10\n
      </span><span style="color:#323232;"># License: GNU GPLv3\n
      </span><span style="color:#323232;">################################################################################\n
      </span><span style="color:#323232;">ACTION=="remove", SUBSYSTEM=="usb", ENV{ID_MODEL}=="Micromax_A74", RUN+="/usr/bin/qrexec-client-vm dom0 buskill.lock"\n
      </span><span style="color:#323232;">EOF\n
      </span>\n
      ```\n
      \n
      The careful reader will see that we're not *actually* disarming BusKill in the same sense as our [BusKill GUI app](https://github.com/buskill/buskill-app/). Indeed, what we're *actually* going to do is swap these two files for 30 seconds.\n
      \n
      This way, if BusKill is armed and you remove the cable, your computer shuts-down.\n
      \n
      But if you want to disarm, the procedure becomes:\n
      \n
      1. Hit the "Disarm BusKill" keyboard shortcut (see below)\n
      2. Wait for the toast popup message indicating that BusKill is now disarmed\n
      3. Remove the cable within 30 seconds\n
      4. Your screen locks (instead of shutting down)\n
      \n
      Personally, I can't think of a QubesOS user that would want to leave their machine unlocked when they go to the bathroom, so I figured this approach would work better than an *actual* disarm.\n
      \n
      Bonus: when you return from your break, just plug-in the BusKill cable in, and it'll already be armed (reducing the risk of user error due to forgetting to arm BusKill).\n
      \n
      Now, let's add the actual '`buskill-disarm.sh`' script to disarm BusKill:\n
      \n
      Execute the following on your '`sys-usb`' Qube:\n
      \n
      ```\n
      \n
      <span style="color:#323232;">cat &lt;&lt; EOF | sudo tee /usr/local/bin/buskill-disarm.sh\n
      </span><span style="color:#323232;">#!/bin/bash\n
      </span><span style="color:#323232;"> \n
      </span><span style="color:#323232;">################################################################################\n
      </span><span style="color:#323232;"># File:    sys-usb:/usr/local/bin/buskill-disarm.sh\n
      </span><span style="color:#323232;"># Purpose: Temp disarm BusKill. For more info, see: https://buskill.in/qubes-os/\n
      </span><span style="color:#323232;"># Authors: Tom \n
      </span><span style="color:#323232;"># Co-Auth: Michael Altfield \n
      </span><span style="color:#323232;"># Created: 2023-05-10\n
      </span><span style="color:#323232;"># License: GNU GPLv3\n
      </span><span style="color:#323232;">################################################################################\n
      </span><span style="color:#323232;"> \n
      </span><span style="color:#323232;"># replace the 'shutdown' trigger with the 'lock' trigger\n
      </span><span style="color:#323232;">sudo rm /etc/udev/rules.d/buskill.rules\n
      </span><span style="color:#323232;">sudo ln -s /rw/config/buskill.lock.rules /etc/udev/rules.d/buskill.rules\n
      </span><span style="color:#323232;">sudo udevadm control --reload\n
      </span><span style="color:#323232;"> \n
      </span><span style="color:#323232;"># let the user know that BusKill is now temporarily disarmed\n
      </span><span style="color:#323232;">notify-send -t 21000 "BusKill" "Disarmed for 30 seconds" -i changes-allow\n
      </span><span style="color:#323232;"> \n
      </span><span style="color:#323232;"># wait 30 seconds\n
      </span><span style="color:#323232;">sleep 30\n
      </span><span style="color:#323232;"> \n
      </span><span style="color:#323232;"># replace the 'lock' trigger with the 'shutdown' trigger\n
      </span><span style="color:#323232;">sudo rm /etc/udev/rules.d/buskill.rules\n
      </span><span style="color:#323232;">sudo ln -s /rw/config/buskill.rules /etc/udev/rules.d/buskill.rules\n
      </span><span style="color:#323232;">sudo udevadm control --reload\n
      </span><span style="color:#323232;">notify-send -t 5000 "BusKill" "BusKill is Armed" -i changes-prevent\n
      </span><span style="color:#323232;">EOF\n
      </span><span style="color:#323232;">sudo chmod +x /usr/local/bin/buskill-disarm.sh\n
      </span>\n
      ```\n
      \n
      dom0\n
      ----\n
      \n
      If you followed our [previous guide to setting-up BusKill in QubesOS](/qubes-os/), then you shouldn't need to add any files to dom0. What you *do* need to do is setup some keyboard shortcuts.\n
      \n
      In the QubesOS GUI, click on the big `Q` "Start Menu" in the top-left of your XFCE panel to open the Applications menu. Navigate to '`System Tools`' and click Keyboard\n
      \n
      | [![Screenshot of QubesOS with an arrow pointing to the “Q” Application Menu in the very top-left of the screen](https://www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_menu1.png)](https://buskill.in/qubes-disarm) | [![Screenshot of QubesOS Application Menu with “System Tools -> Keyboard” highlighted](https://www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_menu2.png)](https://www.buskill.in/qubes-disarm/) |\n
      |---|---|\n
      | Click the “Q” to open the QubesOS Application Menu | Click System Tools -&gt; Keyboard |\n
      \n
      Click the '`Application Shortcuts`' Tab and then click the '`+ Add`' button on the bottom-left of the window.\n
      \n
      | [![Screenshot of QubesOS Keyboard Settings Window that shows the “Application Shortcuts” tab highlighted’alt](https://www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings1.png)](https://www.buskill.in/qubes-disarm/) | [![Screenshot of QubesOS Keyboard Settings Window that shows the “+ Add” button highlightedalt](https://www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-add1.jpg.png)](https://www.buskill.in/qubes-disarm/) |\n
      |---|---|\n
      | Click the “Application Shortcuts” tab to add a Keyboard Shortcut in Qubes | Click the “Add” Button to add a new Keyboard Shortcut in Qubes |\n
      \n
      In the '`Command`' input field, type the following\n
      \n
      ```\n
      \n
      <span style="color:#323232;">qvm-run sys-usb buskill-disarm.sh\n
      </span>\n
      ```\n
      \n
      The above command will execute a command in '`dom0`' that will execute a command in '`sys-usb`' that will execute the '`buskill-disarm.sh`' script that we created above.\n
      \n
      | [![Screenshot of QubesOS Keyboard Settings Window that shows the OK button highlighted](https://www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-add2.png)](https://www.buskill.in/qubes-disarm/) |\n
      |---|\n
      | After typing the command to be executed when the keyboard shortcut is pressed, click the "OK" button |\n
      \n
      Now click "OK" and, when prompted, type Ctrl+Shift+D (or whatever keyboard shortcut you want to bind to "Disarming BusKill").\n
      \n
      | [![Screenshot of QubesOS Keyboard Settings Window that shows the prompt "Press now the keyboard keys you want to use to trigger the command…"alt](https://www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-add3.png)](https://www.buskill.in/qubes-disarm/) | [![Screenshot of QubesOS Keyboard Settings Window that shows the selected Shortcut "Shift+Ctrl+D"](https://www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-add4.png)](https://www.buskill.in/qubes-disarm/) |\n
      |---|---|\n
      | Type “Ctrl+Shift+D” or whatever keyboard shortcut you want to trigger BusKill to be disarmed for 30 seconds |  |\n
      \n
      You should now have a keyboard shortcut binding for disarming BusKill!\n
      \n
      [![Screenshot of QubesOS\n
      Keyboard Settings Window that shows the newly created keyboard shortcut\n
      for Shift+Ctrl+D at the top of the\n
      list](https://www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-added1.png)](https://www.buskill.in/qubes-disarm/)\n
      \n
      Test It!\n
      ========\n
      \n
      At this point, you can test your new (temporary) BusKill Disarm functionality by:\n
      \n
      1. Plugging-in your BusKill cable\n
      2. Typing Ctrl+Shift+D\n
      3. Waiting for the toast popup message to appear indicating that BusKill is disarmed for 30 seconds\n
      4. Unplugging your BusKill cable\n
      \n
      Your machine should lock, not shutdown.\n
      \n
      | [![Screenshot of QubesOS with a toast message in the top-right that says BusKill Disarmed for 30 Seconds](https://www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_buskill-disarmed1.png)](https://www.buskill.in/qubes-disarm/) |\n
      |---|\n
      | After hitting the keyboard shortcut to disarm BusKill, you have 30 seconds to remove the cable |\n
      \n
      After 30 seconds, return to your computer and test the normal "arm" functionality:\n
      \n
      1. Plug-in your BusKill cable\n
      2. Unlock your screen\n
      3. Unplug your BusKill cable\n
      \n
      Your computer should shutdown, not lock.\n
      \n
      | [![Screenshot of QubesOS with a toast message in the top-right that says BusKill is Armed](https://www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_buskill-armed1.png)](https://www.buskill.in/qubes-disarm/) |\n
      |---|\n
      | 30 seconds after hitting the keyboard shortcut, BusKill will arm itself |\n
      \n
      Troubleshooting\n
      ===============\n
      \n
      Is unplugging your USB device doing nothing? Having other issues?\n
      \n
      See the [Troubleshooting section](https://buskill.in/qubes-os/#troubleshooting) in our original guide to using BusKill on QubesOS.\n
      \n
      Limitations/Improvements\n
      ========================\n
      \n
      Security is porous. All software has bugs. Nothing is 100% secure. For more limitations to using BusKill on QubesOS, see the [Limitations section](https://busill.in/qubes-os/#limitations) in our original guide to using BusKill on QubesOS.\n
      \n
      Buy a BusKill Cable\n
      ===================\n
      \n
      We look forward to continuing to improve the BusKill software and making BusKill more accessible this year. If you want to help, [please consider purchasing a BusKill cable](https://buskill.in/buy) for yourself or a loved one. It helps us fund further development, and you get your own BusKill cable to keep you or your loved ones safe.\n
      \n
      You can also buy a BusKill cable with bitcoin, monero, and other altcoins from our [BusKill Store’s .onion site](http://buskillvampfih2iucxhit3qp36i2zzql3u6pmkeafvlxs3tlmot5yad.onion/buy/).\n
      \n
      Stay safe,  \n
      The BusKill Team  \n
      [www.buskill.in](https://www.buskill.in/)  \n
      [buskillvampfih2iucxhit3qp36i2zzql3u6pmkeafvlxs3tl…](http://www.buskillvampfih2iucxhit3qp36i2zzql3u6pmkeafvlxs3tlmot5yad.onion)
      """
    +type: "link"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 0
    +favouriteCount: 4
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1696353188 {#1870
      date: 2023-10-03 19:13:08.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1843 …}
    +votes: Doctrine\ORM\PersistentCollection {#1879 …}
    +reports: Doctrine\ORM\PersistentCollection {#1885 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1395 …}
    +notifications: Doctrine\ORM\PersistentCollection {#1890 …}
    +badges: Doctrine\ORM\PersistentCollection {#1935 …}
    +children: []
    -id: 3502
    -titleTs: "'buskil':3 'dead':4 'disarm':2 'guid':10 'keyboard':8 'man':5 'qubeso':1 'shortcut':9 'switch':6"
    -bodyTs: "'-01':1485 '-02':1486 '-05':1581,1821 '-10':1582,1822 '-36':936 '/#demo)':408 '/)':2618 '/2011/05/31/usb-security-challenges.html).':955 '/bin/bash':1795 '/buskill-laptop-kill-cord-dead-man-switch':1058 '/buskill/buskill-app/).':1623 '/buy':745,811,1099 '/buy)':2559 '/buy/).':2609 '/doc/disposablevm/)':208 '/doc/installation-guide/#initial-setup),':885 '/doc/qrexec/#qubes-rpc-services),':1228 '/doc/usb-devices/)':865 '/doc/usb-qubes/)':854 '/etc/redhat-release':1112 '/etc/udev/rules.d':1508 '/etc/udev/rules.d/buskill.rules':1467,1562,1836,1841,1885,1890 '/forum/#!topic/qubes-devel/qwl5pjqps-4/discussion))':305 '/index.php/udev#udev_rule_example).':1021 '/licenses/by-sa/4.0/)':639 '/licenses/gpl-3.0.html)':655 '/luks-self-destruct':505,1370 '/news/the-operating-system-that-can-protect-you-even-if-you-get-hacked/)to':193 '/qubes-os':68,98,1343,1927 '/qubes-os-yubikey-buskill/).':122 '/qubes-os/':1479,1575,1811 '/qubes-os/#limitations)':2515 '/qubes-os/#troubleshooting)':2479 '/qubes-os/).':89 '/qubesos/qubes-issues/issues/6684#issuecomment-1435381919),':919 '/qubesos/qubes-issues/issues/904)':312 '/rw/config/buskill.lock.rules':1557,1563,1840 '/rw/config/buskill.rules':1356,1449,1462,1468,1507,1889 '/rw/config/buskill.rules.bak':1450 '/usr/bin/qrexec-client-vm':1500,1596 '/usr/local/bin/buskill-disarm.sh':1794,1800,1912 '/v/qpwyod_cqr4](https://www.youtube.com/v/qpwyod_cqr4)*':414 '/wiki/qubes/disposablevm#warnings)--as':295 '/wiki/udev)':966 '/wp-content/uploads/sites/8/2020/02/buskilldemo.mp4)](https://www.buskill.in/#demo)':400 '/wp-content/uploads/sites/8/qubes-disarm_buskill-armed1.png)](https://www.buskill.in/qubes-disarm/)':2450 '/wp-content/uploads/sites/8/qubes-disarm_buskill-disarmed1.png)](https://www.buskill.in/qubes-disarm/)':2379 '/wp-content/uploads/sites/8/qubes-disarm_featuredimage.jpg)](https://buskill.in/qubes-disarm)':51 '/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-add1.jpg.png)](https://www.buskill.in/qubes-disarm/)':2082 '/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-add2.png)](https://www.buskill.in/qubes-disarm/)':2164 '/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-add3.png)](https://www.buskill.in/qubes-disarm/)':2229 '/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-add4.png)](https://www.buskill.in/qubes-disarm/)':2246 '/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-added1.png)](https://www.buskill.in/qubes-disarm/)':2302 '/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings1.png)](https://www.buskill.in/qubes-disarm/)':2067 '/wp-content/uploads/sites/8/qubes-disarm_menu1.png)](https://buskill.in/qubes-disarm)':2005 '/wp-content/uploads/sites/8/qubes-disarm_menu2.png)](https://www.buskill.in/qubes-disarm/)':2018 '1':90,488,1163,1276,1665,2318,2409 '1/2':67,97 '100':2499 '2':99,493,1172,1289,1674,2325,2416 '2/2':104 '2020':1484 '2023':1580,1820 '21000':1860 '3':499,1187,1310,1687,2330,2420 '30':1638,1692,1864,1871,1874,2264,2345,2375,2390,2397,2451 '4':1202,1694,2347 '4.1.2':1115 '5':1219 '5000':1899 'a74':1016,1498,1594 'abl':148,286,1209 'abrupt':824 'access':259,2543 'accident':1435 'act':383 'action':1490,1586 'activist':327 'actual':382,1317,1609,1628,1735,1775 'adapt':110 'add':531,772,1470,1516,1773,1934,2041,2077,2089,2097,2100 'addit':773 'advanc':766 'ahead':1389 'allow':24,1869 'alreadi':74,1347,1755 'also':146,721,2589 'alt':2064,2226 'altcoin':2599 'altfield':1482,1578,1818 'alway':1525 'and/or':392 'anyth':486 'app':1620 'appear':2338 'applic':1973,1992,2009,2026,2034,2060,2085 'approach':1729 'appvm':264 'arbitrari':1212 'arm':44,463,535,1645,1757,1768,1903,2407,2447,2460 'arrow':1987 'articl':2,114,563,684,806 'assembl':1097 'asset':368 'assum':842 'assumpt':826,832 'auth':1816 'author':1480,1576,1812 'awar':723 'bathroom':33,548,1724 'batter':374,445 'becom':1664 'behalf':867 'behind':342,354 'best':586 'better':1732 'big':1957 'bind':2199,2273 'bit':1141 'bitcoin':2595 'blog':119 'blog.invisiblethings.org':954 'blog.invisiblethings.org/2011/05/31/usb-security-challenges.html).':953 'bodi':425 'bonus':1737 'bottom':2046 'bottom-left':2045 'break':1743 'brilliant':186 'bug':2496 'build':57 'bus':467 'busill.in':2514 'busill.in/qubes-os/#limitations)':2513 'buskil':19,46,84,101,125,396,403,415,482,524,599,731,747,813,959,998,1007,1033,1051,1086,1119,1177,1340,1375,1471,1541,1611,1618,1643,1669,1683,1749,1769,1780,1804,1851,1861,1900,1901,1924,2202,2259,2276,2314,2323,2341,2350,2372,2387,2414,2423,2445,2458,2486,2506,2522,2527,2537,2541,2555,2577,2592,2602,2613 'buskill-disarm.sh':1297,1776,2121,2144 'buskill-specif':1006,1032 'buskill.in':1478,1574,1810,2478,2558 'buskill.in/buy)':2557 'buskill.in/qubes-os/':1477,1573,1809 'buskill.in/qubes-os/#troubleshooting)':2477 'buskill.lock':1598 'buskill.softshutdown':1502 'buskillvampfih2iucxhit3qp36i2zzql3u6pmkeafvlxs3tl':2619 'buskillvampfih2iucxhit3qp36i2zzql3u6pmkeafvlxs3tlmot5yad.onion':2608 'buskillvampfih2iucxhit3qp36i2zzql3u6pmkeafvlxs3tlmot5yad.onion/buy/).':2607 'button':1283,2042,2078,2098,2160,2181 'buy':810,1084,1094,2525,2590 'cabl':748,814,973,999,1087,1650,1690,1750,2324,2351,2395,2415,2424,2528,2556,2578,2593 'cannot':603 'care':588,794,1601 'cat':1111,1458,1553,1790 'caus':35,475 'cc':634 'cc-by-sa':633 'chair':440 'chanc':282 'chang':1868,1906 'changes-allow':1867 'changes-prev':1905 'chmod':1910 'choos':993 'chose':941 'classifi':138,248 'click':1954,1980,2019,2028,2032,2039,2083,2095,2178,2183 'co':1815 'co-auth':1814 'combin':874 'command':555,1067,1213,2109,2124,2128,2135,2168,2225 'compartiment':190 'comput':37,497,765,822,1652,2402,2426 'concern':701 'configur':477,1169,1280 'connect':469 'consid':2552 'consider':796 'consist':661 'constraint':1273 'contain':552,560,692 'content':621,658 'continu':2533 'control':1511,1844,1893 'cord':22,64,94,1054 'corrupt':570 'crash':447 'creat':1129,1483,1579,1819,2148,2287 'creativecommons.org':638 'creativecommons.org/licenses/by-sa/4.0/)':637 'ctrl':2189,2242,2248,2292,2327 'current':271 'currently-run':270 'd':145,284,1081,1454,2191,2243,2250,2293,2329 'data':151,196,267,276,289,365,466,581,608,695,697,1431 'data/input':1252 'date':1451 'day':1411 'dead':538 'decid':872,903 'delet':574 'demo':397 'depend':988 'describ':3,514,528,780,1124 'design':1135,1204 'destroy':170,317 'destruct':43,504,740,756,774,1369 'detect':968 'determin':1037 'develop':2571 'devic':947,957,1046,1174,1178,1376,2467 'device-specif':1045 'disarm':16,45,100,536,1282,1418,1543,1610,1661,1668,1686,1736,1779,1803,1855,1862,2201,2262,2275,2315,2343,2373,2386 'disclaim':549 'disk':226 'dispoablevm':913 'dispos':156,204,296,690,932 'dispvm':143,154,168,253,274,292,315 'document':353 'dom0':869,1110,1118,1171,1188,1218,1243,1262,1288,1315,1501,1597,1913,1938,2130 'done':584 'door':357,377,450 'drive':991,1009,1035,1043 'due':725,1132,1270,1432,1764 'dvm':937 'eg':541,934,1198,1234 'en.wikipedia.org':965 'en.wikipedia.org/wiki/udev)':964 'encrypt':227,394 'enemi':343 'env':1012,1494,1590 'environ':1065 'eof':1459,1503,1554,1599,1791,1908 'error':1763 'even':1359 'event':474,862 'exact':977 'exampl':29 'exclus':687 'execut':480,1193,1216,1239,1295,1319,1402,1439,1544,1781,2126,2133,2142,2171 'experi':677,1381 'experiment':553 'explain':404 'exploit':184 'fall':437 'fals':1437 'false-posit':1436 'familiar':76 'fde':393 'fedora':935 'feet':435 'field':2111 'figur':1727 'file':161,301,554,985,1120,1126,1350,1395,1463,1521,1558,1636,1796,1936 'follow':617,712,769,1332,1441,1546,1783,1916,2114 'forget':1766 'forward':2531 'freedom.press':192 'freedom.press/news/the-operating-system-that-can-protect-you-even-if-you-get-hacked/)to':191 'full':225 'fulli':1096 'function':2316,2408 'fund':2569 'get':258,1413,2574 'github.com':311,918,1622 'github.com/buskill/buskill-app/).':1621 'github.com/qubesos/qubes-issues/issues/6684#issuecomment-1435381919),':917 'github.com/qubesos/qubes-issues/issues/904)':310 'gnu':651,1488,1584,1824 'go':30,545,1388,1629,1721 'god':950 'gplv3':652,1489,1585,1825 'great':212 'group':461 'groups.google.com':304 'groups.google.com/forum/#!topic/qubes-devel/qwl5pjqps-4/discussion))':303 'gui':1619,1953 'guid':55,551,589,619,624,646,714,770,828,840,892,926,1002,1103,1335,1919,2483,2519 'gymnast':1144 'h':1455 'handl':860 'happen':819 'help':951,2550,2567 'high':281,673 'highlight':2015,2063,2161 'highlightedalt':2079 'hit':1666,2381,2454 'hocker':117 'human':331 'humandecoded.io':121 'humandecoded.io/qubes-os-yubikey-buskill/).':120 'id':1013,1495,1591 'ideal':1248 'identifi':1004,1048 'import':1155 'improv':2535 'in-plac':1537 'includ':643,681 'inde':1624 'indic':1681,2339 'info':411,1475,1571,1807 'inform':139,249,559 'initi':500 'input':2110 'insid':140,250,1195 'instal':846,881,915 'instead':1698 'intellig':178,340 'introduc':1050 'isol':944 'issu':2472 'journalist':176,326 'jump':432 'keep':194,1157,2580 'key':395,2217 'keyboard':7,532,1165,1285,1312,1670,1948,1981,2014,2031,2054,2071,2091,2103,2153,2174,2194,2206,2216,2233,2253,2271,2280,2288,2383,2456 'kill':21,63,93,1053 'know':594,1849 'laptop':20,62,92,132,223,242,387,428,453,1057 'last':509 'lead':568 'leav':705,1715 'left':1965,1999,2047 'less':1258 'less-trust':1257 'let':320,1386,1514,1771,1846 'liabil':666 'licens':630,640,648,656,671,1487,1583,1823 'like':1175 'limit':664,2503,2511 'limitations/improvements':2489 'line':344 'linux':961 'list':1274,2299 'liter':129,239 'll':1278,1291,1754 'ln':1505,1838,1887 'lock':356,489,759,1527,1566,1697,1832,1877,2355,2430 'look':2530 'loos':1428 'loss':609,698 'love':2564,2584 'luk':1366 'm':219,1453,1456 'machin':691,1717,2353 'magnet':418,468 'make':200,830,1089,2540 'man':539 'manipul':1306 'match':958,1030 'may':564,566,949,1358 'mental':1143 'menu':1960,1974,1993,2010,2027 'messag':1680,2336,2364,2437 'michael':1481,1577,1817 'micromax':1015,1497,1593 'might':1408 'mind':1159 'model':1014,1496,1592 'modifi':1361 'monero':2596 'monitor':1064 'mv':1448 'name':855,1266 'navig':1975 'necessarili':829 'need':1409,1932,1942 'net':900 'network':878 'new':1384,1398,1417,1518,2102,2312 'newli':2286 'non':755 'non-destruct':754 'normal':2406 'note':106,720,1060,1078 'noth':2469,2497 'notifi':1857,1896 'notify-send':1856,1895 'occur':612 'ok':2159,2180,2184 'old':1394 'one':60,779,1028,1095,1399,1523,2565,2585 'onion':2605 'open':627,1971,2023 'oper':179,341 'oppress':336 'origin':113,2482,2518 'os':513 'outlin':667,729,801,833 'panel':1969 'part':59 'passphras':234 'paus':17 'perman':573 'permit':1231 'person':1702 'place':1539 'pleas':2551 'plug':1746,2320,2411 'plug-in':1745,2410 'plugging-in':2319 'point':1988,2307 'polic':372 'popup':1679,2335 'porous':2492 'posit':1438 'post':108,214,510,526,783 'prefer':1082 'prepar':348 'press':2177,2213 'prevent':1907 'previous':153,291,1334,1918 'privat':266 'privileg':1191 'probabl':1422 'procedur':1419,1663 'proceed':710 'prompt':2187,2212 'properti':1018,1026 'protect':363 'provid':626 'purchas':744,2553 'purpos':1469,1564,1801 'put':1536 'q':1958,1991,2021 'qube':185,319,512,851,879,1076,1113,1224,1447,1552,1789,2094,2106 'qubes-o':511 'qubes-rpc':1223 'qubeso':10,48,66,86,96,103,183,222,522,845,1100,1107,1137,1162,1342,1709,1926,1952,1984,2008,2025,2053,2070,2152,2205,2232,2279,2360,2433,2488,2508,2524 'queri':1040 'quick':379 'qvm':2116 'qvm-run':2115 'r4.1':1116 'ram':391,446 're':135,230,245,324,1149,1379,1607,1627 'read':70 'reader':1602 'reason':1247 'recommend':674 'recov':150,288 'reduc':1758 'refer':889,923 'regim':337 'releas':719,735,1114 'reload':1512,1845,1894 'remov':1372,1491,1587,1648,1688,2393 'replac':887,921,1024,1826,1875 'research':175,346 'respect':670 'respons':442,605 'result':615 'return':1740,2399 'right':332,2369,2442 'rip':455 'risk':596,728,792,1760 'rm':1835,1884 'rootf':159,299 'rout':1180 'rpc':1225 'rule':82,979,1309,1472,1520 'run':272,905,1070,1499,1595,2117 'sa':636 'safe':197,2586,2611 'save':1293 'say':322,2371,2444 'screen':491,761,1529,1568,1696,2002,2419 'screenshot':1982,2006,2051,2068,2150,2203,2230,2277,2358,2431 'script':680,1194,1241,1269,1298,1305,1322,1777,2145 'second':1639,1693,1865,1872,2265,2346,2376,2391,2398,2452 'secret':352,371 'section':1122,2476,2512 'secur':164,174,188,308,1246,2490,2500 'security-through-compartiment':187 'see':1049,1476,1572,1604,1672,1808,2473,2509 'select':2239 'self':42,503,739,1368 'self-destruct':41,502,738,1367 'send':1211,1858,1897 'sens':1615 'sent':1254 'sequenc':506 'set':1338,1922,2055,2072,2154,2207,2234,2281 'setting-up':1337,1921 'setup':6,80,517,1385,1946 'sever':472,831,975 'shift':2190,2241,2249,2291,2328 'ship':752 'shortcut':8,533,1286,1313,1671,1949,2035,2061,2086,2092,2104,2175,2195,2240,2254,2272,2289,2384,2457 'shouldn':1930 'show':2058,2075,2157,2210,2237,2284 'shred':165,309,389 'shut':494,1654,1700 'shutdown':39,385,763,825,1406,1828,1881,2357,2428 'shuts-down':1653 'site':2606 'sleep':1873 'soft':1405 'soft-shutdown':1404 'softwar':557,642,1059,2494,2538 'someon':128,238 'sourc':366 'specif':1008,1034,1047 'start':1959 'stay':2610 'steal':130,240 'store':2603 'strong':233 'subsystem':1492,1588 'sudden':373,431,1427 'sudo':1460,1504,1509,1555,1792,1834,1837,1842,1883,1886,1891,1909 'sure':220 'swap':1633 'switch':540 'sys':836,857,895,899,908,929,1074,1184,1200,1236,1301,1325,1328,1353,1445,1465,1550,1560,1787,1798,2119,2138 'sys-net':898 'sys-usb':835,856,894,907,928,1073,1183,1199,1235,1300,1324,1327,1352,1444,1464,1549,1559,1786,1797,2118,2137 'system':520,1977,2012,2029 'tab':2036,2062,2087 'tabl':458 'take':793,1139 'team':2614 'tee':1461,1556,1793 'temp':1802 'templatevm':933 'temporari':2313 'temporarili':15,1854 'test':2303,2310,2404 'tether':423 'think':1706 'though':1244 'throughout':804 'thug':464 'time':882,916 'toast':1678,2334,2363,2436 'tom':116,1813 'tool':1978,2013,2030 'top':351,1964,1998,2296,2368,2441 'top-left':1963,1997 'top-right':2367,2440 'top-secret':350 'total':572 'trigger':478,483,600,741,757,775,1364,1829,1833,1878,1882,2223,2258 'trip':420 'trip-wir':419 'troubleshoot':2462,2475 'trust':1259 'two':1635 'type':2112,2166,2188,2247,2326 'udev':81,956,963,978,1017,1066,1308,1519 'udevadm':1063,1510,1843,1892 'ui':1167 'understand':1146 'unlock':1718,2417 'unplug':2348,2421,2464 'us':2568 'usb':837,850,858,861,876,896,909,930,946,971,1042,1075,1173,1185,1201,1237,1302,1326,1329,1354,1446,1466,1493,1551,1561,1589,1788,1799,2120,2139,2466 'usb-qub':849 'use':201,231,686,962,982,995,1414,2221,2485,2505,2521 'user':26,591,767,1109,1117,1710,1762,1848 'util':416 'v4.1':1108 'valuabl':694 've':583 'version':1101 'via':1221 'video':405 'virtual':160,300 'vm':157,297,910,1186,1260 'vms':205,1197,1205,1233 'volatile.img':302 'wait':1675,1870,2331 'want':1425,1659,1713,2197,2219,2256,2548 'warn':718,800 'watch':401 'way':1641 'whatev':2193,2252 'whistleblow':328 'whonix':142,203,252,273 'wiki.archlinux.org':1020 'wiki.archlinux.org/index.php/udev#udev_rule_example).':1019 'window':2050,2056,2073,2155,2208,2235,2282 'wipe':1391 'wire':421 'within':1691 'without':34 'work':136,181,211,246,1731 'worker':333 'worst':816 'would':1712,1730 'written':1105 'www.buskill.in':50,88,399,407,2004,2017,2066,2081,2163,2228,2245,2301,2378,2449,2615,2617 'www.buskill.in/#demo)':406 'www.buskill.in/)':2616 'www.buskill.in/qubes-os/).':87 'www.buskill.in/wp-content/uploads/sites/8/2020/02/buskilldemo.mp4)](https://www.buskill.in/#demo)':398 'www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_buskill-armed1.png)](https://www.buskill.in/qubes-disarm/)':2448 'www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_buskill-disarmed1.png)](https://www.buskill.in/qubes-disarm/)':2377 'www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_featuredimage.jpg)](https://buskill.in/qubes-disarm)':49 'www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-add1.jpg.png)](https://www.buskill.in/qubes-disarm/)':2080 'www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-add2.png)](https://www.buskill.in/qubes-disarm/)':2162 'www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-add3.png)](https://www.buskill.in/qubes-disarm/)':2227 'www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-add4.png)](https://www.buskill.in/qubes-disarm/)':2244 'www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-added1.png)](https://www.buskill.in/qubes-disarm/)':2300 'www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings1.png)](https://www.buskill.in/qubes-disarm/)':2065 'www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_menu1.png)](https://buskill.in/qubes-disarm)':2003 'www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_menu2.png)](https://www.buskill.in/qubes-disarm/)':2016 'www.buskillvampfih2iucxhit3qp36i2zzql3u6pmkeafvlxs3tlmot5yad.onion':2620 'www.gnu.org':654 'www.gnu.org/licenses/gpl-3.0.html)':653 'www.qubes-os.org':207,853,864,884,1227 'www.qubes-os.org/doc/disposablevm/)':206 'www.qubes-os.org/doc/installation-guide/#initial-setup),':883 'www.qubes-os.org/doc/qrexec/#qubes-rpc-services),':1226 'www.qubes-os.org/doc/usb-devices/)':863 'www.qubes-os.org/doc/usb-qubes/)':852 'www.whonix.org':294 'www.whonix.org/wiki/qubes/disposablevm#warnings)--as':293 'x':1911 'xfce':1968 'y':1452 'year':2545 'youtube.com':413 'youtube.com/v/qpwyod_cqr4](https://www.youtube.com/v/qpwyod_cqr4)*':412 'ⓘ':105,1077"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1696362188
    +visibility: "visible             "
    +apId: "https://monero.town/post/703020"
    +editedAt: null
    +createdAt: DateTimeImmutable @1696353188 {#118
      date: 2023-10-03 19:13:08.0 +02:00
    }
  }
  "isSingle" => true
  "showBody" => false
]

[
  "class" => "entry--single section--top"
]

App\Twig\Components\EntryComponent {#1780
  -authorizationChecker: Symfony\Component\Security\Core\Authorization\AuthorizationChecker {#931 …}
  -newCommentMarkerCount: App\Kbin\NewCommentMarker\NewCommentMarkerCount {#1764 …}
  -cache: Symfony\Component\Cache\Adapter\TraceableTagAwareAdapter {#600 …}
  -twig: Twig\Environment {#1252 …}
  -requestStack: Symfony\Component\HttpFoundation\RequestStack {#1328 …}
  -security: Symfony\Bundle\SecurityBundle\Security {#1101 …}
  +entry: App\Entity\Entry {#1917
    +user: Proxies\__CG__\App\Entity\User {#1946
      +avatar: null
      +cover: null
      +email: "maltfield@monero.town"
      +username: "@maltfield@monero.town"
      +roles: []
      +followersCount: 0
      +homepage: "front"
      +about: """
        I make and sell [BusKill laptop kill cords](https://buskill.in). Monero is accepted.\n
        \n
        [michaelaltfield.net](https://michaelaltfield.net)
        """
      +lastActive: DateTime @1727484173 {#3155
        date: 2024-09-28 02:42:53.0 +02:00
      }
      +markedForDeletionAt: null
      +fields: null
      +oauthGithubId: null
      +oauthGoogleId: null
      +oauthFacebookId: null
      +oauthKeycloakId: null
      +hideAdult: true
      +showSubscribedUsers: true
      +showSubscribedMagazines: true
      +showSubscribedDomains: true
      +preferredLanguages: []
      +featuredMagazines: null
      +showProfileSubscriptions: false
      +showProfileFollowings: true
      +markNewComments: false
      +notifyOnNewEntry: false
      +notifyOnNewEntryReply: true
      +notifyOnNewEntryCommentReply: true
      +notifyOnNewPost: false
      +notifyOnNewPostReply: true
      +notifyOnNewPostCommentReply: true
      +addMentionsEntries: false
      +addMentionsPosts: true
      +isBanned: false
      +isVerified: false
      +isDeleted: false
      +isBot: false
      +spamProtection: true
      +customCss: null
      +ignoreMagazinesCustomCss: false
      +moderatorTokens: Doctrine\ORM\PersistentCollection {#3160 …}
      +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#3163 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#3165 …}
      +entries: Doctrine\ORM\PersistentCollection {#3167 …}
      +entryVotes: Doctrine\ORM\PersistentCollection {#3169 …}
      +entryComments: Doctrine\ORM\PersistentCollection {#3171 …}
      +entryCommentVotes: Doctrine\ORM\PersistentCollection {#3185 …}
      +posts: Doctrine\ORM\PersistentCollection {#3176 …}
      +postVotes: Doctrine\ORM\PersistentCollection {#3199 …}
      +postComments: Doctrine\ORM\PersistentCollection {#3220 …}
      +postCommentVotes: Doctrine\ORM\PersistentCollection {#3251 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#3208 …}
      +subscribedDomains: Doctrine\ORM\PersistentCollection {#3260 …}
      +follows: Doctrine\ORM\PersistentCollection {#3263 …}
      +followers: Doctrine\ORM\PersistentCollection {#3258 …}
      +blocks: Doctrine\ORM\PersistentCollection {#3286 …}
      +blockers: Doctrine\ORM\PersistentCollection {#3282 …}
      +blockedMagazines: Doctrine\ORM\PersistentCollection {#3299 …}
      +blockedDomains: Doctrine\ORM\PersistentCollection {#3303 …}
      +reports: Doctrine\ORM\PersistentCollection {#3287 …}
      +favourites: Doctrine\ORM\PersistentCollection {#3309 …}
      +violations: Doctrine\ORM\PersistentCollection {#3316 …}
      +notifications: Doctrine\ORM\PersistentCollection {#3318 …}
      +awards: Doctrine\ORM\PersistentCollection {#3310 …}
      +subscribedCategories: Doctrine\ORM\PersistentCollection {#3327 …}
      +categories: Doctrine\ORM\PersistentCollection {#3340 …}
      -id: 53233
      -password: "$2y$13$ONerzxs5ikSMZPP7JZz93.L7bi7bpix5PvgJJmsqWoSIfRo3rR8JO"
      -totpSecret: null
      -totpBackupCodes: []
      -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#3351 …}
      +apId: "maltfield@monero.town"
      +apProfileId: "https://monero.town/u/maltfield"
      +apPublicUrl: "https://monero.town/u/maltfield"
      +apFollowersUrl: null
      +apInboxUrl: "https://monero.town/inbox"
      +apDomain: "monero.town"
      +apPreferredUsername: "maltfield"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: false
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1711292170 {#3152
        date: 2024-03-24 15:56:10.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1696724832 {#3154
        date: 2023-10-08 02:27:12.0 +02:00
      }
      +__isInitialized__: true
       …2
    }
    +magazine: App\Entity\Magazine {#316
      +icon: null
      +name: "privacyguides@lemmy.one"
      +title: "privacyguides"
      +description: """
        *In the digital age, protecting your personal information might seem like an impossible task. We’re here to help.*\n
        \n
        This is a community for sharing news about privacy, posting information about cool privacy tools and services, and getting advice about your privacy journey.\n
        \n
        ---\n
        \n
        You can subscribe to this community from any Kbin or Lemmy instance:\n
        \n
        - [Subscribe on Kbin.social](https://kbin.social/m/privacyguides@lemmy.one)\n
        - [Subscribe on Lemmy.one](https://lemmy.one/c/privacyguides)\n
        - [Subscribe on Lemmy.ml](https://lemmy.ml/c/privacyguides@lemmy.one)\n
        - [Subscribe on Beehaw.org](https://beehaw.org/c/privacyguides@lemmy.one)\n
        \n
        [Learn more…](https://lemmy.one/post/355)\n
        \n
        ---\n
        \n
        Check out our website at [privacyguides.org](https://www.privacyguides.org) before asking your questions here. We’ve tried answering the common questions and recommendations there!\n
        \n
        Want to get involved? The website is [open-source on GitHub](https://github.com/privacyguides/privacyguides.org), and your help would be appreciated!\n
        \n
        ---\n
        \n
        **This community is the “official” Privacy Guides community on Lemmy, which can be [verified here](https://www.reddit.com/r/PrivacyGuides/comments/13x7oe3/who_wants_to_try_out_lemmy_privacyguideslemmyone/). Other “Privacy Guides” communities on other Lemmy servers are not moderated by this team or associated with the website.**\n
        \n
        ---\n
        \n
        **Moderation Rules:**\n
        \n
        1. We prefer posting about open-source software whenever possible.\n
        2. This is not the place for self-promotion if you are not listed on privacyguides.org. If you want to be listed, [make a suggestion on our forum first](https://discuss.privacyguides.net/c/site-development/suggestions/6).\n
        3. No soliciting engagement: Don’t ask for upvotes, follows, etc.\n
        4. Surveys, Fundraising, and Petitions must be **pre**-approved by the mod team.\n
        5. Be civil, no violence, hate speech. Assume people here are posting in good faith.\n
        6. Don’t repost topics which have already been covered here.\n
        7. News posts must be related to privacy and security, and **your post title must match the article headline exactly.** Do not editorialize titles, you can post your opinions in the post body or a comment.\n
        8. Memes/images/video posts that could be summarized as text explanations should not be posted. Infographics and conference talks from reputable sources are acceptable.\n
        9. **No help vampires:** This is not a tech support subreddit, don’t abuse our community’s willingness to help. Questions related to privacy, security or privacy/security related software and their configurations are acceptable.\n
        10. No misinformation: Extraordinary claims must be matched with **evidence.**\n
        11. Do not post about VPNs or cryptocurrencies which are not listed on [privacyguides.org](https://www.privacyguides.org/en/tools/). See Rule 2 for info on adding new recommendations to the website.\n
        12. General guides or software lists are not permitted. Original sources and research about specific topics are allowed as long as they are high quality and factual. **We are not providing a platform for poorly-vetted, out-of-date or conflicting recommendations.**\n
        \n
        ---\n
        \n
        Additional Resources:\n
        \n
        - [EFF: Surveillance Self-Defense](https://ssd.eff.org/)\n
        - [Consumer Reports Security Planner](https://securityplanner.consumerreports.org/)\n
        - [Jonah Aragon](https://www.jonaharagon.com) ([YouTube](https://youtube.com/@jonaharagon))\n
        - [r/Privacy](https://www.reddit.com/r/Privacy)\n
        - [Big Ass Data Broker Opt-Out List](https://github.com/yaelwrites/Big-Ass-Data-Broker-Opt-Out-List)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 259
      +entryCommentCount: 2490
      +postCount: 5
      +postCommentCount: 29
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729537882 {#324
        date: 2024-10-21 21:11:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#304 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#300 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#289 …}
      +entries: Doctrine\ORM\PersistentCollection {#247 …}
      +posts: Doctrine\ORM\PersistentCollection {#205 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#267 …}
      +bans: Doctrine\ORM\PersistentCollection {#184 …}
      +reports: Doctrine\ORM\PersistentCollection {#170 …}
      +badges: Doctrine\ORM\PersistentCollection {#148 …}
      +logs: Doctrine\ORM\PersistentCollection {#138 …}
      +awards: Doctrine\ORM\PersistentCollection {#127 …}
      +categories: Doctrine\ORM\PersistentCollection {#114 …}
      -id: 39
      +apId: "privacyguides@lemmy.one"
      +apProfileId: "https://lemmy.one/c/privacyguides"
      +apPublicUrl: "https://lemmy.one/c/privacyguides"
      +apFollowersUrl: "https://lemmy.one/c/privacyguides/followers"
      +apInboxUrl: "https://lemmy.one/inbox"
      +apDomain: "lemmy.one"
      +apPreferredUsername: "privacyguides"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729576084 {#325
        date: 2024-10-22 07:48:04.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1696630878 {#319
        date: 2023-10-07 00:21:18.0 +02:00
      }
    }
    +image: Proxies\__CG__\App\Entity\Image {#2412 …}
    +domain: Proxies\__CG__\App\Entity\Domain {#1794 …}
    +slug: "QubesOS-Disarm-BusKill-Dead-Man-Switch-with-Keyboard-Shortcut-Guide"
    +title: "[QubesOS] Disarm BusKill Dead Man Switch with Keyboard Shortcut (Guide)"
    +url: "https://www.buskill.in/qubes-disarm/"
    +body: """
      This article describes how to setup keyboard shortcuts in QubesOS so that you can temporarily disarm (pause) the BusKill laptop kill cord.\n
      \n
      This allows the user to, for example, go to the bathroom without causing their computer to shutdown or self-destruct.\n
      \n
      [![Arm  Disarm BusKill in QubesOS](https://www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_featuredImage.jpg)](https://buskill.in/qubes-disarm)\n
      \n
      This is a guide that builds on part one: [A Laptop Kill Cord for QubesOS (1/2)](/qubes-os/). Before reading this, you should already be familiar with how to [setup udev rules for BusKill on QubesOS](https://www.buskill.in/qubes-os/).\n
      \n
      1. [A Laptop Kill Cord for QubesOS (1/2)](/qubes-os/)\n
      2. Disarm BusKill in QubesOS (2/2)\n
      \n
      > ⓘ Note: This post is adapted from its original [article on Tom Hocker's blog](https://humandecoded.io/qubes-os-yubikey-buskill/).\n
      \n
      What is BusKill?\n
      ================\n
      \n
      > What if someone literally steals your laptop while you're working with classified information inside a Whonix DispVM? They'd also be able to recover data from previous DispVMs--as Disposable VM's rootfs virtual files are *not* securely shredded after your DispVM is destroyed.\n
      \n
      Are you a security researcher, journalist, or intelligence operative that works in QubesOS--exploiting Qubes' [brilliant security-through-compartimentalization](https://freedom.press/news/the-operating-system-that-can-protect-you-even-if-you-get-hacked/)to keep your data safe? Do you make use of Whonix [Disposable VMs](https://www.qubes-os.org/doc/disposablevm/) for your work? Great! This post is for you.\n
      \n
      I'm sure your QubesOS laptop has Full Disk Encryption and you're using a strong passphrase. But what if someone literally steals your laptop while you're working with classified information inside a Whonix DispVM? Not only will they get access to all of your AppVM's private data and the currently-running Whonix DispVM's data, but there's a high chance they'd be able to recover data from [previous DispVMs](https://www.whonix.org/wiki/Qubes/DisposableVM#Warnings)--as **Disposable VM's rootfs virtual files ([volatile.img](https://groups.google.com/forum/#!topic/qubes-devel/QwL5PjqPs-4/discussion)) are [*not* securely shredded](https://github.com/QubesOS/qubes-issues/issues/904) after your DispVM is destroyed** by Qubes!\n
      \n
      Let's say you're a journalist, activist, whistleblower, or a human rights worker in an oppressive regime. Or an intelligence operative behind enemy lines doing research or preparing a top-secret document behind a locked door. What do you do to protect your data, sources, or assets when the secret police suddenly batter down your door? How quickly can you *actually* act to shutdown your laptop and shred your RAM and/or FDE encryption keys?\n
      \n
      | [![BusKill Demo](https://www.buskill.in/wp-content/uploads/sites/8/2020/02/busKillDemo.mp4)](https://www.buskill.in/#demo) |\n
      |---|\n
      | *Watch the [BusKill Explainer Video](https://www.buskill.in/#demo) for more info [youtube.com/v/qPwyoD_cQR4](https://www.youtube.com/v/qPwyoD_cQR4)* |\n
      \n
      BusKill utilizes a magnetic trip-wire that tethers your body to your laptop. If you suddenly jump to your feet or fall off your chair (in response to the battering ram crashing through your door) or your laptop is ripped off your table by a group of armed thugs, the data bus' magnetic connection will be severed. This event causes a configurable *trigger* to execute.\n
      \n
      The BusKill `trigger` can be anything from:\n
      \n
      1. locking your screen or\n
      2. shutting down the computer or\n
      3. initiating a [self-destruct](/luks-self-destruct/) sequence\n
      \n
      While our [last post](qubes-os) described how to setup such a system in QubesOS with BusKill, *this* post will describe how to add keyboard shortcuts to arm & disarm the dead man switch (eg so you can go to the bathroom).\n
      \n
      Disclaimer\n
      ==========\n
      \n
      This guide contains experimental files, commands, and software. The information contained in this article may or may not lead to corruption or total permanent deletion of some or all of your data. We've done our best to carefully guide the user so they know the risks of each BusKill trigger, but we cannot be responsible for any data loss that has occurred as a result of following this guide.\n
      \n
      The contents of this guide is provided openly and is licensed under the [CC-BY-SA](https://creativecommons.org/licenses/by-sa/4.0/) license. The software included in this guide is licensed under the [GNU GPLv3](https://www.gnu.org/licenses/gpl-3.0.html) license. All content here is consistent with the limitations of liabilities outlined in its respective licenses.\n
      \n
      We highly recommend that any experiments with the scripts included in this article are used exclusively on a disposable machine containing no valuable data.\n
      \n
      If data loss is a concern for you, then leave now and do not proceed with following this guide. You have been warned.\n
      \n
      Release Note\n
      ------------\n
      \n
      Also be aware that, due to the risks outlined above, BusKill will *not*be released with this "self-destruct" trigger.\n
      \n
      If you [purchase](/buy)a BusKill cable, it will only ship with non-destructive triggers that lock the screen or shutdown the computer. Advanced users can follow guides to add additional destructive triggers, such as the one described in this post, but they should do so at their own risk--taking carefully into consideration all of the warnings outlined above and throughout this article.\n
      \n
      **Again, if you [buy](/buy) a BusKill cable, the worst that can happen is your computer will abruptly shutdown.**\n
      \n
      Assumptions\n
      ===========\n
      \n
      This guide necessarily makes several assumptions outlined below.\n
      \n
      sys-usb\n
      -------\n
      \n
      In this guide, we assume that your QubesOS install has a [USB-Qube](https://www.qubes-os.org/doc/usb-qubes/) named '`sys-usb`' for handling [USB events](https://www.qubes-os.org/doc/usb-devices/) on behalf of `dom0`.\n
      \n
      If you decided to combine your USB and networking Qubes at [install time](https://www.qubes-os.org/doc/installation-guide/#initial-setup), then replace all references in this guide for '`sys-usb`' to '`sys-net`'.\n
      \n
      If you decided to run your '`sys-usb`' VM as a DispoableVM at [install time](https://github.com/QubesOS/qubes-issues/issues/6684#issuecomment-1435381919), then replace all references in this guide for '`sys-usb`' its Disposable TemplateVM (eg '`fedora-36-dvm`').\n
      \n
      …And if you chose not to isolate your USB devices, then [may god help you](https://blog.invisiblethings.org/2011/05/31/usb-security-challenges.html).\n
      \n
      Udev Device Matching\n
      --------------------\n
      \n
      BusKill in Linux uses [udev](https://en.wikipedia.org/wiki/Udev) to detect when the USB's cable is severed. The exact udev rule that you use in the files below will depend on the drive you choose to use in your BusKill cable.\n
      \n
      In this guide, we identify our BusKill-specific drive with the '`ENV{ID_MODEL}==“Micromax_A74”`' [udev property](https://wiki.archlinux.org/index.php/Udev#udev_rule_example). You should replace this property with one that matches your BusKill-specific drive.\n
      \n
      To determine how to query your USB drive for device-specific identifiers, see [Introducing BusKill: A Kill Cord for your Laptop](/buskill-laptop-kill-cord-dead-man-switch/#software). Note that the ``udevadm monitor --environment --udev`` command should be run in the '`sys-usb`' Qube.\n
      \n
      > ⓘ Note: If you'd prefer to buy a BusKill cable than make your own, you can buy one fully assembled [here](/buy).\n
      \n
      QubesOS Version\n
      ---------------\n
      \n
      This guide was written for QubesOS v4.1.\n
      \n
      ```\n
      \n
      <span style="color:#323232;">[user@dom0 ~]$ cat /etc/redhat-release Qubes release 4.1.2 (R4.1)\n
      </span><span style="color:#323232;">[user@dom0 ~]$\n
      </span>\n
      ```\n
      \n
      BusKill Files\n
      =============\n
      \n
      This section will describe what files should be created and where.\n
      \n
      Due to the design of QubesOS, it takes a bit of mental gymnastics to understand what we're doing and why. It's important to keep in mind that, in QubesOS\n
      \n
      1. The keyboard and UI are configured in '`dom0’`\n
      2. USB devices (like the BusKill device) are routed to the '`sys-usb`' VM\n
      3. dom0 has the privilege to execute scripts inside other VMs (eg '`sys-usb`')\n
      4. By design, VMs should *not* be able to send arbitrary commands to be executed in dom0\n
      5. .…but via the [qubes-rpc](https://www.qubes-os.org/doc/qrexec/#qubes-rpc-services), we *can* permit some VMs (eg '`sys-usb`') to execute a script in dom0 (though for security reasons, ideally such that no data/input is sent from the less-trusted VM to dom0 -- other than the name of the script)\n
      \n
      Due to the constraints listed above:\n
      \n
      1. We'll be configuring the disarm button as keyboard shortcut in dom0\n
      2. We'll be saving and executing the '`buskill-disarm.sh`' script in '`sys-usb`' (because these scripts manipulate our udev rules)\n
      3. The keyboard shortcut in dom0 will *actually* be executing the above script in '`sys-usb`'\n
      \n
      sys-usb\n
      -------\n
      \n
      If you followed our [previous guide to setting-up BusKill in QubesOS](/qubes-os/), then you should already have a file in '`sys-usb`' at '`/rw/config/buskill.rules`'. You may even have modified it to trigger a [LUKS Self-Destruct](/luks-self-destruct/) on removal of your BusKill device.\n
      \n
      Because you're *now* experimenting with a new setup, let's go ahead and wipe out that old file with a new one that *just* executes a soft-shutdown. You might need some days to get used to the new disarm procedure, and you probably don't want to suddenly loose all your data due to an accidental false-positive!\n
      \n
      Execute the following on your '`sys-usb`' Qube:\n
      \n
      ```\n
      \n
      <span style="color:#323232;">mv /rw/config/buskill.rules /rw/config/buskill.rules.bak.`date "+%Y%m%d_%H%M%S"`\n
      </span><span style="color:#323232;">cat &lt;&lt; EOF | sudo tee /rw/config/buskill.rules\n
      </span><span style="color:#323232;">################################################################################\n
      </span><span style="color:#323232;"># File:    sys-usb:/etc/udev/rules.d/buskill.rules -> /rw/config/buskill.rules\n
      </span><span style="color:#323232;"># Purpose: Add buskill rules. For more info, see: https://buskill.in/qubes-os/\n
      </span><span style="color:#323232;"># Authors: Michael Altfield \n
      </span><span style="color:#323232;"># Created: 2020-01-02\n
      </span><span style="color:#323232;"># License: GNU GPLv3\n
      </span><span style="color:#323232;">################################################################################\n
      </span><span style="color:#323232;">ACTION=="remove", SUBSYSTEM=="usb", ENV{ID_MODEL}=="Micromax_A74", RUN+="/usr/bin/qrexec-client-vm dom0 buskill.softShutdown"\n
      </span><span style="color:#323232;">EOF\n
      </span><span style="color:#323232;">sudo ln -s /rw/config/buskill.rules /etc/udev/rules.d/\n
      </span><span style="color:#323232;">sudo udevadm control --reload\n
      </span>\n
      ```\n
      \n
      Now, let's add a new udev '`.rules`' file. This one will always *just* lock your screen, and it's what will be put in-place when BusKill is "disarmed".\n
      \n
      Execute the following on your '`sys-usb`' Qube:\n
      \n
      ```\n
      \n
      <span style="color:#323232;">cat &lt;&lt; EOF | sudo tee /rw/config/buskill.lock.rules\n
      </span><span style="color:#323232;">################################################################################\n
      </span><span style="color:#323232;"># File:    sys-usb:/etc/udev/rules.d/buskill.rules -> /rw/config/buskill.lock.rules\n
      </span><span style="color:#323232;"># Purpose: Just lock the screen. For more info, see: https://buskill.in/qubes-os/\n
      </span><span style="color:#323232;"># Authors: Michael Altfield \n
      </span><span style="color:#323232;"># Created: 2023-05-10\n
      </span><span style="color:#323232;"># License: GNU GPLv3\n
      </span><span style="color:#323232;">################################################################################\n
      </span><span style="color:#323232;">ACTION=="remove", SUBSYSTEM=="usb", ENV{ID_MODEL}=="Micromax_A74", RUN+="/usr/bin/qrexec-client-vm dom0 buskill.lock"\n
      </span><span style="color:#323232;">EOF\n
      </span>\n
      ```\n
      \n
      The careful reader will see that we're not *actually* disarming BusKill in the same sense as our [BusKill GUI app](https://github.com/buskill/buskill-app/). Indeed, what we're *actually* going to do is swap these two files for 30 seconds.\n
      \n
      This way, if BusKill is armed and you remove the cable, your computer shuts-down.\n
      \n
      But if you want to disarm, the procedure becomes:\n
      \n
      1. Hit the "Disarm BusKill" keyboard shortcut (see below)\n
      2. Wait for the toast popup message indicating that BusKill is now disarmed\n
      3. Remove the cable within 30 seconds\n
      4. Your screen locks (instead of shutting down)\n
      \n
      Personally, I can't think of a QubesOS user that would want to leave their machine unlocked when they go to the bathroom, so I figured this approach would work better than an *actual* disarm.\n
      \n
      Bonus: when you return from your break, just plug-in the BusKill cable in, and it'll already be armed (reducing the risk of user error due to forgetting to arm BusKill).\n
      \n
      Now, let's add the actual '`buskill-disarm.sh`' script to disarm BusKill:\n
      \n
      Execute the following on your '`sys-usb`' Qube:\n
      \n
      ```\n
      \n
      <span style="color:#323232;">cat &lt;&lt; EOF | sudo tee /usr/local/bin/buskill-disarm.sh\n
      </span><span style="color:#323232;">#!/bin/bash\n
      </span><span style="color:#323232;"> \n
      </span><span style="color:#323232;">################################################################################\n
      </span><span style="color:#323232;"># File:    sys-usb:/usr/local/bin/buskill-disarm.sh\n
      </span><span style="color:#323232;"># Purpose: Temp disarm BusKill. For more info, see: https://buskill.in/qubes-os/\n
      </span><span style="color:#323232;"># Authors: Tom \n
      </span><span style="color:#323232;"># Co-Auth: Michael Altfield \n
      </span><span style="color:#323232;"># Created: 2023-05-10\n
      </span><span style="color:#323232;"># License: GNU GPLv3\n
      </span><span style="color:#323232;">################################################################################\n
      </span><span style="color:#323232;"> \n
      </span><span style="color:#323232;"># replace the 'shutdown' trigger with the 'lock' trigger\n
      </span><span style="color:#323232;">sudo rm /etc/udev/rules.d/buskill.rules\n
      </span><span style="color:#323232;">sudo ln -s /rw/config/buskill.lock.rules /etc/udev/rules.d/buskill.rules\n
      </span><span style="color:#323232;">sudo udevadm control --reload\n
      </span><span style="color:#323232;"> \n
      </span><span style="color:#323232;"># let the user know that BusKill is now temporarily disarmed\n
      </span><span style="color:#323232;">notify-send -t 21000 "BusKill" "Disarmed for 30 seconds" -i changes-allow\n
      </span><span style="color:#323232;"> \n
      </span><span style="color:#323232;"># wait 30 seconds\n
      </span><span style="color:#323232;">sleep 30\n
      </span><span style="color:#323232;"> \n
      </span><span style="color:#323232;"># replace the 'lock' trigger with the 'shutdown' trigger\n
      </span><span style="color:#323232;">sudo rm /etc/udev/rules.d/buskill.rules\n
      </span><span style="color:#323232;">sudo ln -s /rw/config/buskill.rules /etc/udev/rules.d/buskill.rules\n
      </span><span style="color:#323232;">sudo udevadm control --reload\n
      </span><span style="color:#323232;">notify-send -t 5000 "BusKill" "BusKill is Armed" -i changes-prevent\n
      </span><span style="color:#323232;">EOF\n
      </span><span style="color:#323232;">sudo chmod +x /usr/local/bin/buskill-disarm.sh\n
      </span>\n
      ```\n
      \n
      dom0\n
      ----\n
      \n
      If you followed our [previous guide to setting-up BusKill in QubesOS](/qubes-os/), then you shouldn't need to add any files to dom0. What you *do* need to do is setup some keyboard shortcuts.\n
      \n
      In the QubesOS GUI, click on the big `Q` "Start Menu" in the top-left of your XFCE panel to open the Applications menu. Navigate to '`System Tools`' and click Keyboard\n
      \n
      | [![Screenshot of QubesOS with an arrow pointing to the “Q” Application Menu in the very top-left of the screen](https://www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_menu1.png)](https://buskill.in/qubes-disarm) | [![Screenshot of QubesOS Application Menu with “System Tools -> Keyboard” highlighted](https://www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_menu2.png)](https://www.buskill.in/qubes-disarm/) |\n
      |---|---|\n
      | Click the “Q” to open the QubesOS Application Menu | Click System Tools -&gt; Keyboard |\n
      \n
      Click the '`Application Shortcuts`' Tab and then click the '`+ Add`' button on the bottom-left of the window.\n
      \n
      | [![Screenshot of QubesOS Keyboard Settings Window that shows the “Application Shortcuts” tab highlighted’alt](https://www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings1.png)](https://www.buskill.in/qubes-disarm/) | [![Screenshot of QubesOS Keyboard Settings Window that shows the “+ Add” button highlightedalt](https://www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-add1.jpg.png)](https://www.buskill.in/qubes-disarm/) |\n
      |---|---|\n
      | Click the “Application Shortcuts” tab to add a Keyboard Shortcut in Qubes | Click the “Add” Button to add a new Keyboard Shortcut in Qubes |\n
      \n
      In the '`Command`' input field, type the following\n
      \n
      ```\n
      \n
      <span style="color:#323232;">qvm-run sys-usb buskill-disarm.sh\n
      </span>\n
      ```\n
      \n
      The above command will execute a command in '`dom0`' that will execute a command in '`sys-usb`' that will execute the '`buskill-disarm.sh`' script that we created above.\n
      \n
      | [![Screenshot of QubesOS Keyboard Settings Window that shows the OK button highlighted](https://www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-add2.png)](https://www.buskill.in/qubes-disarm/) |\n
      |---|\n
      | After typing the command to be executed when the keyboard shortcut is pressed, click the "OK" button |\n
      \n
      Now click "OK" and, when prompted, type Ctrl+Shift+D (or whatever keyboard shortcut you want to bind to "Disarming BusKill").\n
      \n
      | [![Screenshot of QubesOS Keyboard Settings Window that shows the prompt "Press now the keyboard keys you want to use to trigger the command…"alt](https://www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-add3.png)](https://www.buskill.in/qubes-disarm/) | [![Screenshot of QubesOS Keyboard Settings Window that shows the selected Shortcut "Shift+Ctrl+D"](https://www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-add4.png)](https://www.buskill.in/qubes-disarm/) |\n
      |---|---|\n
      | Type “Ctrl+Shift+D” or whatever keyboard shortcut you want to trigger BusKill to be disarmed for 30 seconds |  |\n
      \n
      You should now have a keyboard shortcut binding for disarming BusKill!\n
      \n
      [![Screenshot of QubesOS\n
      Keyboard Settings Window that shows the newly created keyboard shortcut\n
      for Shift+Ctrl+D at the top of the\n
      list](https://www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-added1.png)](https://www.buskill.in/qubes-disarm/)\n
      \n
      Test It!\n
      ========\n
      \n
      At this point, you can test your new (temporary) BusKill Disarm functionality by:\n
      \n
      1. Plugging-in your BusKill cable\n
      2. Typing Ctrl+Shift+D\n
      3. Waiting for the toast popup message to appear indicating that BusKill is disarmed for 30 seconds\n
      4. Unplugging your BusKill cable\n
      \n
      Your machine should lock, not shutdown.\n
      \n
      | [![Screenshot of QubesOS with a toast message in the top-right that says BusKill Disarmed for 30 Seconds](https://www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_buskill-disarmed1.png)](https://www.buskill.in/qubes-disarm/) |\n
      |---|\n
      | After hitting the keyboard shortcut to disarm BusKill, you have 30 seconds to remove the cable |\n
      \n
      After 30 seconds, return to your computer and test the normal "arm" functionality:\n
      \n
      1. Plug-in your BusKill cable\n
      2. Unlock your screen\n
      3. Unplug your BusKill cable\n
      \n
      Your computer should shutdown, not lock.\n
      \n
      | [![Screenshot of QubesOS with a toast message in the top-right that says BusKill is Armed](https://www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_buskill-armed1.png)](https://www.buskill.in/qubes-disarm/) |\n
      |---|\n
      | 30 seconds after hitting the keyboard shortcut, BusKill will arm itself |\n
      \n
      Troubleshooting\n
      ===============\n
      \n
      Is unplugging your USB device doing nothing? Having other issues?\n
      \n
      See the [Troubleshooting section](https://buskill.in/qubes-os/#troubleshooting) in our original guide to using BusKill on QubesOS.\n
      \n
      Limitations/Improvements\n
      ========================\n
      \n
      Security is porous. All software has bugs. Nothing is 100% secure. For more limitations to using BusKill on QubesOS, see the [Limitations section](https://busill.in/qubes-os/#limitations) in our original guide to using BusKill on QubesOS.\n
      \n
      Buy a BusKill Cable\n
      ===================\n
      \n
      We look forward to continuing to improve the BusKill software and making BusKill more accessible this year. If you want to help, [please consider purchasing a BusKill cable](https://buskill.in/buy) for yourself or a loved one. It helps us fund further development, and you get your own BusKill cable to keep you or your loved ones safe.\n
      \n
      You can also buy a BusKill cable with bitcoin, monero, and other altcoins from our [BusKill Store’s .onion site](http://buskillvampfih2iucxhit3qp36i2zzql3u6pmkeafvlxs3tlmot5yad.onion/buy/).\n
      \n
      Stay safe,  \n
      The BusKill Team  \n
      [www.buskill.in](https://www.buskill.in/)  \n
      [buskillvampfih2iucxhit3qp36i2zzql3u6pmkeafvlxs3tl…](http://www.buskillvampfih2iucxhit3qp36i2zzql3u6pmkeafvlxs3tlmot5yad.onion)
      """
    +type: "link"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 0
    +favouriteCount: 4
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1696353188 {#1870
      date: 2023-10-03 19:13:08.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1843 …}
    +votes: Doctrine\ORM\PersistentCollection {#1879 …}
    +reports: Doctrine\ORM\PersistentCollection {#1885 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1395 …}
    +notifications: Doctrine\ORM\PersistentCollection {#1890 …}
    +badges: Doctrine\ORM\PersistentCollection {#1935 …}
    +children: []
    -id: 3502
    -titleTs: "'buskil':3 'dead':4 'disarm':2 'guid':10 'keyboard':8 'man':5 'qubeso':1 'shortcut':9 'switch':6"
    -bodyTs: "'-01':1485 '-02':1486 '-05':1581,1821 '-10':1582,1822 '-36':936 '/#demo)':408 '/)':2618 '/2011/05/31/usb-security-challenges.html).':955 '/bin/bash':1795 '/buskill-laptop-kill-cord-dead-man-switch':1058 '/buskill/buskill-app/).':1623 '/buy':745,811,1099 '/buy)':2559 '/buy/).':2609 '/doc/disposablevm/)':208 '/doc/installation-guide/#initial-setup),':885 '/doc/qrexec/#qubes-rpc-services),':1228 '/doc/usb-devices/)':865 '/doc/usb-qubes/)':854 '/etc/redhat-release':1112 '/etc/udev/rules.d':1508 '/etc/udev/rules.d/buskill.rules':1467,1562,1836,1841,1885,1890 '/forum/#!topic/qubes-devel/qwl5pjqps-4/discussion))':305 '/index.php/udev#udev_rule_example).':1021 '/licenses/by-sa/4.0/)':639 '/licenses/gpl-3.0.html)':655 '/luks-self-destruct':505,1370 '/news/the-operating-system-that-can-protect-you-even-if-you-get-hacked/)to':193 '/qubes-os':68,98,1343,1927 '/qubes-os-yubikey-buskill/).':122 '/qubes-os/':1479,1575,1811 '/qubes-os/#limitations)':2515 '/qubes-os/#troubleshooting)':2479 '/qubes-os/).':89 '/qubesos/qubes-issues/issues/6684#issuecomment-1435381919),':919 '/qubesos/qubes-issues/issues/904)':312 '/rw/config/buskill.lock.rules':1557,1563,1840 '/rw/config/buskill.rules':1356,1449,1462,1468,1507,1889 '/rw/config/buskill.rules.bak':1450 '/usr/bin/qrexec-client-vm':1500,1596 '/usr/local/bin/buskill-disarm.sh':1794,1800,1912 '/v/qpwyod_cqr4](https://www.youtube.com/v/qpwyod_cqr4)*':414 '/wiki/qubes/disposablevm#warnings)--as':295 '/wiki/udev)':966 '/wp-content/uploads/sites/8/2020/02/buskilldemo.mp4)](https://www.buskill.in/#demo)':400 '/wp-content/uploads/sites/8/qubes-disarm_buskill-armed1.png)](https://www.buskill.in/qubes-disarm/)':2450 '/wp-content/uploads/sites/8/qubes-disarm_buskill-disarmed1.png)](https://www.buskill.in/qubes-disarm/)':2379 '/wp-content/uploads/sites/8/qubes-disarm_featuredimage.jpg)](https://buskill.in/qubes-disarm)':51 '/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-add1.jpg.png)](https://www.buskill.in/qubes-disarm/)':2082 '/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-add2.png)](https://www.buskill.in/qubes-disarm/)':2164 '/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-add3.png)](https://www.buskill.in/qubes-disarm/)':2229 '/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-add4.png)](https://www.buskill.in/qubes-disarm/)':2246 '/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-added1.png)](https://www.buskill.in/qubes-disarm/)':2302 '/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings1.png)](https://www.buskill.in/qubes-disarm/)':2067 '/wp-content/uploads/sites/8/qubes-disarm_menu1.png)](https://buskill.in/qubes-disarm)':2005 '/wp-content/uploads/sites/8/qubes-disarm_menu2.png)](https://www.buskill.in/qubes-disarm/)':2018 '1':90,488,1163,1276,1665,2318,2409 '1/2':67,97 '100':2499 '2':99,493,1172,1289,1674,2325,2416 '2/2':104 '2020':1484 '2023':1580,1820 '21000':1860 '3':499,1187,1310,1687,2330,2420 '30':1638,1692,1864,1871,1874,2264,2345,2375,2390,2397,2451 '4':1202,1694,2347 '4.1.2':1115 '5':1219 '5000':1899 'a74':1016,1498,1594 'abl':148,286,1209 'abrupt':824 'access':259,2543 'accident':1435 'act':383 'action':1490,1586 'activist':327 'actual':382,1317,1609,1628,1735,1775 'adapt':110 'add':531,772,1470,1516,1773,1934,2041,2077,2089,2097,2100 'addit':773 'advanc':766 'ahead':1389 'allow':24,1869 'alreadi':74,1347,1755 'also':146,721,2589 'alt':2064,2226 'altcoin':2599 'altfield':1482,1578,1818 'alway':1525 'and/or':392 'anyth':486 'app':1620 'appear':2338 'applic':1973,1992,2009,2026,2034,2060,2085 'approach':1729 'appvm':264 'arbitrari':1212 'arm':44,463,535,1645,1757,1768,1903,2407,2447,2460 'arrow':1987 'articl':2,114,563,684,806 'assembl':1097 'asset':368 'assum':842 'assumpt':826,832 'auth':1816 'author':1480,1576,1812 'awar':723 'bathroom':33,548,1724 'batter':374,445 'becom':1664 'behalf':867 'behind':342,354 'best':586 'better':1732 'big':1957 'bind':2199,2273 'bit':1141 'bitcoin':2595 'blog':119 'blog.invisiblethings.org':954 'blog.invisiblethings.org/2011/05/31/usb-security-challenges.html).':953 'bodi':425 'bonus':1737 'bottom':2046 'bottom-left':2045 'break':1743 'brilliant':186 'bug':2496 'build':57 'bus':467 'busill.in':2514 'busill.in/qubes-os/#limitations)':2513 'buskil':19,46,84,101,125,396,403,415,482,524,599,731,747,813,959,998,1007,1033,1051,1086,1119,1177,1340,1375,1471,1541,1611,1618,1643,1669,1683,1749,1769,1780,1804,1851,1861,1900,1901,1924,2202,2259,2276,2314,2323,2341,2350,2372,2387,2414,2423,2445,2458,2486,2506,2522,2527,2537,2541,2555,2577,2592,2602,2613 'buskill-disarm.sh':1297,1776,2121,2144 'buskill-specif':1006,1032 'buskill.in':1478,1574,1810,2478,2558 'buskill.in/buy)':2557 'buskill.in/qubes-os/':1477,1573,1809 'buskill.in/qubes-os/#troubleshooting)':2477 'buskill.lock':1598 'buskill.softshutdown':1502 'buskillvampfih2iucxhit3qp36i2zzql3u6pmkeafvlxs3tl':2619 'buskillvampfih2iucxhit3qp36i2zzql3u6pmkeafvlxs3tlmot5yad.onion':2608 'buskillvampfih2iucxhit3qp36i2zzql3u6pmkeafvlxs3tlmot5yad.onion/buy/).':2607 'button':1283,2042,2078,2098,2160,2181 'buy':810,1084,1094,2525,2590 'cabl':748,814,973,999,1087,1650,1690,1750,2324,2351,2395,2415,2424,2528,2556,2578,2593 'cannot':603 'care':588,794,1601 'cat':1111,1458,1553,1790 'caus':35,475 'cc':634 'cc-by-sa':633 'chair':440 'chanc':282 'chang':1868,1906 'changes-allow':1867 'changes-prev':1905 'chmod':1910 'choos':993 'chose':941 'classifi':138,248 'click':1954,1980,2019,2028,2032,2039,2083,2095,2178,2183 'co':1815 'co-auth':1814 'combin':874 'command':555,1067,1213,2109,2124,2128,2135,2168,2225 'compartiment':190 'comput':37,497,765,822,1652,2402,2426 'concern':701 'configur':477,1169,1280 'connect':469 'consid':2552 'consider':796 'consist':661 'constraint':1273 'contain':552,560,692 'content':621,658 'continu':2533 'control':1511,1844,1893 'cord':22,64,94,1054 'corrupt':570 'crash':447 'creat':1129,1483,1579,1819,2148,2287 'creativecommons.org':638 'creativecommons.org/licenses/by-sa/4.0/)':637 'ctrl':2189,2242,2248,2292,2327 'current':271 'currently-run':270 'd':145,284,1081,1454,2191,2243,2250,2293,2329 'data':151,196,267,276,289,365,466,581,608,695,697,1431 'data/input':1252 'date':1451 'day':1411 'dead':538 'decid':872,903 'delet':574 'demo':397 'depend':988 'describ':3,514,528,780,1124 'design':1135,1204 'destroy':170,317 'destruct':43,504,740,756,774,1369 'detect':968 'determin':1037 'develop':2571 'devic':947,957,1046,1174,1178,1376,2467 'device-specif':1045 'disarm':16,45,100,536,1282,1418,1543,1610,1661,1668,1686,1736,1779,1803,1855,1862,2201,2262,2275,2315,2343,2373,2386 'disclaim':549 'disk':226 'dispoablevm':913 'dispos':156,204,296,690,932 'dispvm':143,154,168,253,274,292,315 'document':353 'dom0':869,1110,1118,1171,1188,1218,1243,1262,1288,1315,1501,1597,1913,1938,2130 'done':584 'door':357,377,450 'drive':991,1009,1035,1043 'due':725,1132,1270,1432,1764 'dvm':937 'eg':541,934,1198,1234 'en.wikipedia.org':965 'en.wikipedia.org/wiki/udev)':964 'encrypt':227,394 'enemi':343 'env':1012,1494,1590 'environ':1065 'eof':1459,1503,1554,1599,1791,1908 'error':1763 'even':1359 'event':474,862 'exact':977 'exampl':29 'exclus':687 'execut':480,1193,1216,1239,1295,1319,1402,1439,1544,1781,2126,2133,2142,2171 'experi':677,1381 'experiment':553 'explain':404 'exploit':184 'fall':437 'fals':1437 'false-posit':1436 'familiar':76 'fde':393 'fedora':935 'feet':435 'field':2111 'figur':1727 'file':161,301,554,985,1120,1126,1350,1395,1463,1521,1558,1636,1796,1936 'follow':617,712,769,1332,1441,1546,1783,1916,2114 'forget':1766 'forward':2531 'freedom.press':192 'freedom.press/news/the-operating-system-that-can-protect-you-even-if-you-get-hacked/)to':191 'full':225 'fulli':1096 'function':2316,2408 'fund':2569 'get':258,1413,2574 'github.com':311,918,1622 'github.com/buskill/buskill-app/).':1621 'github.com/qubesos/qubes-issues/issues/6684#issuecomment-1435381919),':917 'github.com/qubesos/qubes-issues/issues/904)':310 'gnu':651,1488,1584,1824 'go':30,545,1388,1629,1721 'god':950 'gplv3':652,1489,1585,1825 'great':212 'group':461 'groups.google.com':304 'groups.google.com/forum/#!topic/qubes-devel/qwl5pjqps-4/discussion))':303 'gui':1619,1953 'guid':55,551,589,619,624,646,714,770,828,840,892,926,1002,1103,1335,1919,2483,2519 'gymnast':1144 'h':1455 'handl':860 'happen':819 'help':951,2550,2567 'high':281,673 'highlight':2015,2063,2161 'highlightedalt':2079 'hit':1666,2381,2454 'hocker':117 'human':331 'humandecoded.io':121 'humandecoded.io/qubes-os-yubikey-buskill/).':120 'id':1013,1495,1591 'ideal':1248 'identifi':1004,1048 'import':1155 'improv':2535 'in-plac':1537 'includ':643,681 'inde':1624 'indic':1681,2339 'info':411,1475,1571,1807 'inform':139,249,559 'initi':500 'input':2110 'insid':140,250,1195 'instal':846,881,915 'instead':1698 'intellig':178,340 'introduc':1050 'isol':944 'issu':2472 'journalist':176,326 'jump':432 'keep':194,1157,2580 'key':395,2217 'keyboard':7,532,1165,1285,1312,1670,1948,1981,2014,2031,2054,2071,2091,2103,2153,2174,2194,2206,2216,2233,2253,2271,2280,2288,2383,2456 'kill':21,63,93,1053 'know':594,1849 'laptop':20,62,92,132,223,242,387,428,453,1057 'last':509 'lead':568 'leav':705,1715 'left':1965,1999,2047 'less':1258 'less-trust':1257 'let':320,1386,1514,1771,1846 'liabil':666 'licens':630,640,648,656,671,1487,1583,1823 'like':1175 'limit':664,2503,2511 'limitations/improvements':2489 'line':344 'linux':961 'list':1274,2299 'liter':129,239 'll':1278,1291,1754 'ln':1505,1838,1887 'lock':356,489,759,1527,1566,1697,1832,1877,2355,2430 'look':2530 'loos':1428 'loss':609,698 'love':2564,2584 'luk':1366 'm':219,1453,1456 'machin':691,1717,2353 'magnet':418,468 'make':200,830,1089,2540 'man':539 'manipul':1306 'match':958,1030 'may':564,566,949,1358 'mental':1143 'menu':1960,1974,1993,2010,2027 'messag':1680,2336,2364,2437 'michael':1481,1577,1817 'micromax':1015,1497,1593 'might':1408 'mind':1159 'model':1014,1496,1592 'modifi':1361 'monero':2596 'monitor':1064 'mv':1448 'name':855,1266 'navig':1975 'necessarili':829 'need':1409,1932,1942 'net':900 'network':878 'new':1384,1398,1417,1518,2102,2312 'newli':2286 'non':755 'non-destruct':754 'normal':2406 'note':106,720,1060,1078 'noth':2469,2497 'notifi':1857,1896 'notify-send':1856,1895 'occur':612 'ok':2159,2180,2184 'old':1394 'one':60,779,1028,1095,1399,1523,2565,2585 'onion':2605 'open':627,1971,2023 'oper':179,341 'oppress':336 'origin':113,2482,2518 'os':513 'outlin':667,729,801,833 'panel':1969 'part':59 'passphras':234 'paus':17 'perman':573 'permit':1231 'person':1702 'place':1539 'pleas':2551 'plug':1746,2320,2411 'plug-in':1745,2410 'plugging-in':2319 'point':1988,2307 'polic':372 'popup':1679,2335 'porous':2492 'posit':1438 'post':108,214,510,526,783 'prefer':1082 'prepar':348 'press':2177,2213 'prevent':1907 'previous':153,291,1334,1918 'privat':266 'privileg':1191 'probabl':1422 'procedur':1419,1663 'proceed':710 'prompt':2187,2212 'properti':1018,1026 'protect':363 'provid':626 'purchas':744,2553 'purpos':1469,1564,1801 'put':1536 'q':1958,1991,2021 'qube':185,319,512,851,879,1076,1113,1224,1447,1552,1789,2094,2106 'qubes-o':511 'qubes-rpc':1223 'qubeso':10,48,66,86,96,103,183,222,522,845,1100,1107,1137,1162,1342,1709,1926,1952,1984,2008,2025,2053,2070,2152,2205,2232,2279,2360,2433,2488,2508,2524 'queri':1040 'quick':379 'qvm':2116 'qvm-run':2115 'r4.1':1116 'ram':391,446 're':135,230,245,324,1149,1379,1607,1627 'read':70 'reader':1602 'reason':1247 'recommend':674 'recov':150,288 'reduc':1758 'refer':889,923 'regim':337 'releas':719,735,1114 'reload':1512,1845,1894 'remov':1372,1491,1587,1648,1688,2393 'replac':887,921,1024,1826,1875 'research':175,346 'respect':670 'respons':442,605 'result':615 'return':1740,2399 'right':332,2369,2442 'rip':455 'risk':596,728,792,1760 'rm':1835,1884 'rootf':159,299 'rout':1180 'rpc':1225 'rule':82,979,1309,1472,1520 'run':272,905,1070,1499,1595,2117 'sa':636 'safe':197,2586,2611 'save':1293 'say':322,2371,2444 'screen':491,761,1529,1568,1696,2002,2419 'screenshot':1982,2006,2051,2068,2150,2203,2230,2277,2358,2431 'script':680,1194,1241,1269,1298,1305,1322,1777,2145 'second':1639,1693,1865,1872,2265,2346,2376,2391,2398,2452 'secret':352,371 'section':1122,2476,2512 'secur':164,174,188,308,1246,2490,2500 'security-through-compartiment':187 'see':1049,1476,1572,1604,1672,1808,2473,2509 'select':2239 'self':42,503,739,1368 'self-destruct':41,502,738,1367 'send':1211,1858,1897 'sens':1615 'sent':1254 'sequenc':506 'set':1338,1922,2055,2072,2154,2207,2234,2281 'setting-up':1337,1921 'setup':6,80,517,1385,1946 'sever':472,831,975 'shift':2190,2241,2249,2291,2328 'ship':752 'shortcut':8,533,1286,1313,1671,1949,2035,2061,2086,2092,2104,2175,2195,2240,2254,2272,2289,2384,2457 'shouldn':1930 'show':2058,2075,2157,2210,2237,2284 'shred':165,309,389 'shut':494,1654,1700 'shutdown':39,385,763,825,1406,1828,1881,2357,2428 'shuts-down':1653 'site':2606 'sleep':1873 'soft':1405 'soft-shutdown':1404 'softwar':557,642,1059,2494,2538 'someon':128,238 'sourc':366 'specif':1008,1034,1047 'start':1959 'stay':2610 'steal':130,240 'store':2603 'strong':233 'subsystem':1492,1588 'sudden':373,431,1427 'sudo':1460,1504,1509,1555,1792,1834,1837,1842,1883,1886,1891,1909 'sure':220 'swap':1633 'switch':540 'sys':836,857,895,899,908,929,1074,1184,1200,1236,1301,1325,1328,1353,1445,1465,1550,1560,1787,1798,2119,2138 'sys-net':898 'sys-usb':835,856,894,907,928,1073,1183,1199,1235,1300,1324,1327,1352,1444,1464,1549,1559,1786,1797,2118,2137 'system':520,1977,2012,2029 'tab':2036,2062,2087 'tabl':458 'take':793,1139 'team':2614 'tee':1461,1556,1793 'temp':1802 'templatevm':933 'temporari':2313 'temporarili':15,1854 'test':2303,2310,2404 'tether':423 'think':1706 'though':1244 'throughout':804 'thug':464 'time':882,916 'toast':1678,2334,2363,2436 'tom':116,1813 'tool':1978,2013,2030 'top':351,1964,1998,2296,2368,2441 'top-left':1963,1997 'top-right':2367,2440 'top-secret':350 'total':572 'trigger':478,483,600,741,757,775,1364,1829,1833,1878,1882,2223,2258 'trip':420 'trip-wir':419 'troubleshoot':2462,2475 'trust':1259 'two':1635 'type':2112,2166,2188,2247,2326 'udev':81,956,963,978,1017,1066,1308,1519 'udevadm':1063,1510,1843,1892 'ui':1167 'understand':1146 'unlock':1718,2417 'unplug':2348,2421,2464 'us':2568 'usb':837,850,858,861,876,896,909,930,946,971,1042,1075,1173,1185,1201,1237,1302,1326,1329,1354,1446,1466,1493,1551,1561,1589,1788,1799,2120,2139,2466 'usb-qub':849 'use':201,231,686,962,982,995,1414,2221,2485,2505,2521 'user':26,591,767,1109,1117,1710,1762,1848 'util':416 'v4.1':1108 'valuabl':694 've':583 'version':1101 'via':1221 'video':405 'virtual':160,300 'vm':157,297,910,1186,1260 'vms':205,1197,1205,1233 'volatile.img':302 'wait':1675,1870,2331 'want':1425,1659,1713,2197,2219,2256,2548 'warn':718,800 'watch':401 'way':1641 'whatev':2193,2252 'whistleblow':328 'whonix':142,203,252,273 'wiki.archlinux.org':1020 'wiki.archlinux.org/index.php/udev#udev_rule_example).':1019 'window':2050,2056,2073,2155,2208,2235,2282 'wipe':1391 'wire':421 'within':1691 'without':34 'work':136,181,211,246,1731 'worker':333 'worst':816 'would':1712,1730 'written':1105 'www.buskill.in':50,88,399,407,2004,2017,2066,2081,2163,2228,2245,2301,2378,2449,2615,2617 'www.buskill.in/#demo)':406 'www.buskill.in/)':2616 'www.buskill.in/qubes-os/).':87 'www.buskill.in/wp-content/uploads/sites/8/2020/02/buskilldemo.mp4)](https://www.buskill.in/#demo)':398 'www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_buskill-armed1.png)](https://www.buskill.in/qubes-disarm/)':2448 'www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_buskill-disarmed1.png)](https://www.buskill.in/qubes-disarm/)':2377 'www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_featuredimage.jpg)](https://buskill.in/qubes-disarm)':49 'www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-add1.jpg.png)](https://www.buskill.in/qubes-disarm/)':2080 'www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-add2.png)](https://www.buskill.in/qubes-disarm/)':2162 'www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-add3.png)](https://www.buskill.in/qubes-disarm/)':2227 'www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-add4.png)](https://www.buskill.in/qubes-disarm/)':2244 'www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-added1.png)](https://www.buskill.in/qubes-disarm/)':2300 'www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings1.png)](https://www.buskill.in/qubes-disarm/)':2065 'www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_menu1.png)](https://buskill.in/qubes-disarm)':2003 'www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_menu2.png)](https://www.buskill.in/qubes-disarm/)':2016 'www.buskillvampfih2iucxhit3qp36i2zzql3u6pmkeafvlxs3tlmot5yad.onion':2620 'www.gnu.org':654 'www.gnu.org/licenses/gpl-3.0.html)':653 'www.qubes-os.org':207,853,864,884,1227 'www.qubes-os.org/doc/disposablevm/)':206 'www.qubes-os.org/doc/installation-guide/#initial-setup),':883 'www.qubes-os.org/doc/qrexec/#qubes-rpc-services),':1226 'www.qubes-os.org/doc/usb-devices/)':863 'www.qubes-os.org/doc/usb-qubes/)':852 'www.whonix.org':294 'www.whonix.org/wiki/qubes/disposablevm#warnings)--as':293 'x':1911 'xfce':1968 'y':1452 'year':2545 'youtube.com':413 'youtube.com/v/qpwyod_cqr4](https://www.youtube.com/v/qpwyod_cqr4)*':412 'ⓘ':105,1077"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1696362188
    +visibility: "visible             "
    +apId: "https://monero.town/post/703020"
    +editedAt: null
    +createdAt: DateTimeImmutable @1696353188 {#118
      date: 2023-10-03 19:13:08.0 +02:00
    }
  }
  +isSingle: true
  +showShortSentence: true
  +showBody: false
  +showMagazineName: false
  +canSeeTrash: false
  +newComments: 0
}

[
  "user" => Proxies\__CG__\App\Entity\User {#1946
    +avatar: null
    +cover: null
    +email: "maltfield@monero.town"
    +username: "@maltfield@monero.town"
    +roles: []
    +followersCount: 0
    +homepage: "front"
    +about: """
      I make and sell [BusKill laptop kill cords](https://buskill.in). Monero is accepted.\n
      \n
      [michaelaltfield.net](https://michaelaltfield.net)
      """
    +lastActive: DateTime @1727484173 {#3155
      date: 2024-09-28 02:42:53.0 +02:00
    }
    +markedForDeletionAt: null
    +fields: null
    +oauthGithubId: null
    +oauthGoogleId: null
    +oauthFacebookId: null
    +oauthKeycloakId: null
    +hideAdult: true
    +showSubscribedUsers: true
    +showSubscribedMagazines: true
    +showSubscribedDomains: true
    +preferredLanguages: []
    +featuredMagazines: null
    +showProfileSubscriptions: false
    +showProfileFollowings: true
    +markNewComments: false
    +notifyOnNewEntry: false
    +notifyOnNewEntryReply: true
    +notifyOnNewEntryCommentReply: true
    +notifyOnNewPost: false
    +notifyOnNewPostReply: true
    +notifyOnNewPostCommentReply: true
    +addMentionsEntries: false
    +addMentionsPosts: true
    +isBanned: false
    +isVerified: false
    +isDeleted: false
    +isBot: false
    +spamProtection: true
    +customCss: null
    +ignoreMagazinesCustomCss: false
    +moderatorTokens: Doctrine\ORM\PersistentCollection {#3160 …}
    +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#3163 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#3165 …}
    +entries: Doctrine\ORM\PersistentCollection {#3167 …}
    +entryVotes: Doctrine\ORM\PersistentCollection {#3169 …}
    +entryComments: Doctrine\ORM\PersistentCollection {#3171 …}
    +entryCommentVotes: Doctrine\ORM\PersistentCollection {#3185 …}
    +posts: Doctrine\ORM\PersistentCollection {#3176 …}
    +postVotes: Doctrine\ORM\PersistentCollection {#3199 …}
    +postComments: Doctrine\ORM\PersistentCollection {#3220 …}
    +postCommentVotes: Doctrine\ORM\PersistentCollection {#3251 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#3208 …}
    +subscribedDomains: Doctrine\ORM\PersistentCollection {#3260 …}
    +follows: Doctrine\ORM\PersistentCollection {#3263 …}
    +followers: Doctrine\ORM\PersistentCollection {#3258 …}
    +blocks: Doctrine\ORM\PersistentCollection {#3286 …}
    +blockers: Doctrine\ORM\PersistentCollection {#3282 …}
    +blockedMagazines: Doctrine\ORM\PersistentCollection {#3299 …}
    +blockedDomains: Doctrine\ORM\PersistentCollection {#3303 …}
    +reports: Doctrine\ORM\PersistentCollection {#3287 …}
    +favourites: Doctrine\ORM\PersistentCollection {#3309 …}
    +violations: Doctrine\ORM\PersistentCollection {#3316 …}
    +notifications: Doctrine\ORM\PersistentCollection {#3318 …}
    +awards: Doctrine\ORM\PersistentCollection {#3310 …}
    +subscribedCategories: Doctrine\ORM\PersistentCollection {#3327 …}
    +categories: Doctrine\ORM\PersistentCollection {#3340 …}
    -id: 53233
    -password: "$2y$13$ONerzxs5ikSMZPP7JZz93.L7bi7bpix5PvgJJmsqWoSIfRo3rR8JO"
    -totpSecret: null
    -totpBackupCodes: []
    -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#3351 …}
    +apId: "maltfield@monero.town"
    +apProfileId: "https://monero.town/u/maltfield"
    +apPublicUrl: "https://monero.town/u/maltfield"
    +apFollowersUrl: null
    +apInboxUrl: "https://monero.town/inbox"
    +apDomain: "monero.town"
    +apPreferredUsername: "maltfield"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: false
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1711292170 {#3152
      date: 2024-03-24 15:56:10.0 +01:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1696724832 {#3154
      date: 2023-10-08 02:27:12.0 +02:00
    }
    +__isInitialized__: true
     …2
  }
  "showAvatar" => false
]

App\Twig\Components\UserInlineComponent {#3106
  +user: Proxies\__CG__\App\Entity\User {#1946
    +avatar: null
    +cover: null
    +email: "maltfield@monero.town"
    +username: "@maltfield@monero.town"
    +roles: []
    +followersCount: 0
    +homepage: "front"
    +about: """
      I make and sell [BusKill laptop kill cords](https://buskill.in). Monero is accepted.\n
      \n
      [michaelaltfield.net](https://michaelaltfield.net)
      """
    +lastActive: DateTime @1727484173 {#3155
      date: 2024-09-28 02:42:53.0 +02:00
    }
    +markedForDeletionAt: null
    +fields: null
    +oauthGithubId: null
    +oauthGoogleId: null
    +oauthFacebookId: null
    +oauthKeycloakId: null
    +hideAdult: true
    +showSubscribedUsers: true
    +showSubscribedMagazines: true
    +showSubscribedDomains: true
    +preferredLanguages: []
    +featuredMagazines: null
    +showProfileSubscriptions: false
    +showProfileFollowings: true
    +markNewComments: false
    +notifyOnNewEntry: false
    +notifyOnNewEntryReply: true
    +notifyOnNewEntryCommentReply: true
    +notifyOnNewPost: false
    +notifyOnNewPostReply: true
    +notifyOnNewPostCommentReply: true
    +addMentionsEntries: false
    +addMentionsPosts: true
    +isBanned: false
    +isVerified: false
    +isDeleted: false
    +isBot: false
    +spamProtection: true
    +customCss: null
    +ignoreMagazinesCustomCss: false
    +moderatorTokens: Doctrine\ORM\PersistentCollection {#3160 …}
    +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#3163 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#3165 …}
    +entries: Doctrine\ORM\PersistentCollection {#3167 …}
    +entryVotes: Doctrine\ORM\PersistentCollection {#3169 …}
    +entryComments: Doctrine\ORM\PersistentCollection {#3171 …}
    +entryCommentVotes: Doctrine\ORM\PersistentCollection {#3185 …}
    +posts: Doctrine\ORM\PersistentCollection {#3176 …}
    +postVotes: Doctrine\ORM\PersistentCollection {#3199 …}
    +postComments: Doctrine\ORM\PersistentCollection {#3220 …}
    +postCommentVotes: Doctrine\ORM\PersistentCollection {#3251 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#3208 …}
    +subscribedDomains: Doctrine\ORM\PersistentCollection {#3260 …}
    +follows: Doctrine\ORM\PersistentCollection {#3263 …}
    +followers: Doctrine\ORM\PersistentCollection {#3258 …}
    +blocks: Doctrine\ORM\PersistentCollection {#3286 …}
    +blockers: Doctrine\ORM\PersistentCollection {#3282 …}
    +blockedMagazines: Doctrine\ORM\PersistentCollection {#3299 …}
    +blockedDomains: Doctrine\ORM\PersistentCollection {#3303 …}
    +reports: Doctrine\ORM\PersistentCollection {#3287 …}
    +favourites: Doctrine\ORM\PersistentCollection {#3309 …}
    +violations: Doctrine\ORM\PersistentCollection {#3316 …}
    +notifications: Doctrine\ORM\PersistentCollection {#3318 …}
    +awards: Doctrine\ORM\PersistentCollection {#3310 …}
    +subscribedCategories: Doctrine\ORM\PersistentCollection {#3327 …}
    +categories: Doctrine\ORM\PersistentCollection {#3340 …}
    -id: 53233
    -password: "$2y$13$ONerzxs5ikSMZPP7JZz93.L7bi7bpix5PvgJJmsqWoSIfRo3rR8JO"
    -totpSecret: null
    -totpBackupCodes: []
    -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#3351 …}
    +apId: "maltfield@monero.town"
    +apProfileId: "https://monero.town/u/maltfield"
    +apPublicUrl: "https://monero.town/u/maltfield"
    +apFollowersUrl: null
    +apInboxUrl: "https://monero.town/inbox"
    +apDomain: "monero.town"
    +apPreferredUsername: "maltfield"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: false
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1711292170 {#3152
      date: 2024-03-24 15:56:10.0 +01:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1696724832 {#3154
      date: 2023-10-08 02:27:12.0 +02:00
    }
    +__isInitialized__: true
     …2
  }
  +showAvatar: false
}

[
  "date" => DateTimeImmutable @1696353188 {#118
    date: 2023-10-03 19:13:08.0 +02:00
  }
]

App\Twig\Components\DateComponent {#3387
  +date: DateTimeImmutable @1696353188 {#118
    date: 2023-10-03 19:13:08.0 +02:00
  }
}

[
  "createdAt" => DateTimeImmutable @1696353188 {#118
    date: 2023-10-03 19:13:08.0 +02:00
  }
  "editedAt" => null
]

App\Twig\Components\DateEditedComponent {#3451
  +createdAt: DateTimeImmutable @1696353188 {#118
    date: 2023-10-03 19:13:08.0 +02:00
  }
  +editedAt: null
}

[
  "subject" => App\Entity\Entry {#1917
    +user: Proxies\__CG__\App\Entity\User {#1946
      +avatar: null
      +cover: null
      +email: "maltfield@monero.town"
      +username: "@maltfield@monero.town"
      +roles: []
      +followersCount: 0
      +homepage: "front"
      +about: """
        I make and sell [BusKill laptop kill cords](https://buskill.in). Monero is accepted.\n
        \n
        [michaelaltfield.net](https://michaelaltfield.net)
        """
      +lastActive: DateTime @1727484173 {#3155
        date: 2024-09-28 02:42:53.0 +02:00
      }
      +markedForDeletionAt: null
      +fields: null
      +oauthGithubId: null
      +oauthGoogleId: null
      +oauthFacebookId: null
      +oauthKeycloakId: null
      +hideAdult: true
      +showSubscribedUsers: true
      +showSubscribedMagazines: true
      +showSubscribedDomains: true
      +preferredLanguages: []
      +featuredMagazines: null
      +showProfileSubscriptions: false
      +showProfileFollowings: true
      +markNewComments: false
      +notifyOnNewEntry: false
      +notifyOnNewEntryReply: true
      +notifyOnNewEntryCommentReply: true
      +notifyOnNewPost: false
      +notifyOnNewPostReply: true
      +notifyOnNewPostCommentReply: true
      +addMentionsEntries: false
      +addMentionsPosts: true
      +isBanned: false
      +isVerified: false
      +isDeleted: false
      +isBot: false
      +spamProtection: true
      +customCss: null
      +ignoreMagazinesCustomCss: false
      +moderatorTokens: Doctrine\ORM\PersistentCollection {#3160 …}
      +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#3163 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#3165 …}
      +entries: Doctrine\ORM\PersistentCollection {#3167 …}
      +entryVotes: Doctrine\ORM\PersistentCollection {#3169 …}
      +entryComments: Doctrine\ORM\PersistentCollection {#3171 …}
      +entryCommentVotes: Doctrine\ORM\PersistentCollection {#3185 …}
      +posts: Doctrine\ORM\PersistentCollection {#3176 …}
      +postVotes: Doctrine\ORM\PersistentCollection {#3199 …}
      +postComments: Doctrine\ORM\PersistentCollection {#3220 …}
      +postCommentVotes: Doctrine\ORM\PersistentCollection {#3251 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#3208 …}
      +subscribedDomains: Doctrine\ORM\PersistentCollection {#3260 …}
      +follows: Doctrine\ORM\PersistentCollection {#3263 …}
      +followers: Doctrine\ORM\PersistentCollection {#3258 …}
      +blocks: Doctrine\ORM\PersistentCollection {#3286 …}
      +blockers: Doctrine\ORM\PersistentCollection {#3282 …}
      +blockedMagazines: Doctrine\ORM\PersistentCollection {#3299 …}
      +blockedDomains: Doctrine\ORM\PersistentCollection {#3303 …}
      +reports: Doctrine\ORM\PersistentCollection {#3287 …}
      +favourites: Doctrine\ORM\PersistentCollection {#3309 …}
      +violations: Doctrine\ORM\PersistentCollection {#3316 …}
      +notifications: Doctrine\ORM\PersistentCollection {#3318 …}
      +awards: Doctrine\ORM\PersistentCollection {#3310 …}
      +subscribedCategories: Doctrine\ORM\PersistentCollection {#3327 …}
      +categories: Doctrine\ORM\PersistentCollection {#3340 …}
      -id: 53233
      -password: "$2y$13$ONerzxs5ikSMZPP7JZz93.L7bi7bpix5PvgJJmsqWoSIfRo3rR8JO"
      -totpSecret: null
      -totpBackupCodes: []
      -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#3351 …}
      +apId: "maltfield@monero.town"
      +apProfileId: "https://monero.town/u/maltfield"
      +apPublicUrl: "https://monero.town/u/maltfield"
      +apFollowersUrl: null
      +apInboxUrl: "https://monero.town/inbox"
      +apDomain: "monero.town"
      +apPreferredUsername: "maltfield"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: false
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1711292170 {#3152
        date: 2024-03-24 15:56:10.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1696724832 {#3154
        date: 2023-10-08 02:27:12.0 +02:00
      }
      +__isInitialized__: true
       …2
    }
    +magazine: App\Entity\Magazine {#316
      +icon: null
      +name: "privacyguides@lemmy.one"
      +title: "privacyguides"
      +description: """
        *In the digital age, protecting your personal information might seem like an impossible task. We’re here to help.*\n
        \n
        This is a community for sharing news about privacy, posting information about cool privacy tools and services, and getting advice about your privacy journey.\n
        \n
        ---\n
        \n
        You can subscribe to this community from any Kbin or Lemmy instance:\n
        \n
        - [Subscribe on Kbin.social](https://kbin.social/m/privacyguides@lemmy.one)\n
        - [Subscribe on Lemmy.one](https://lemmy.one/c/privacyguides)\n
        - [Subscribe on Lemmy.ml](https://lemmy.ml/c/privacyguides@lemmy.one)\n
        - [Subscribe on Beehaw.org](https://beehaw.org/c/privacyguides@lemmy.one)\n
        \n
        [Learn more…](https://lemmy.one/post/355)\n
        \n
        ---\n
        \n
        Check out our website at [privacyguides.org](https://www.privacyguides.org) before asking your questions here. We’ve tried answering the common questions and recommendations there!\n
        \n
        Want to get involved? The website is [open-source on GitHub](https://github.com/privacyguides/privacyguides.org), and your help would be appreciated!\n
        \n
        ---\n
        \n
        **This community is the “official” Privacy Guides community on Lemmy, which can be [verified here](https://www.reddit.com/r/PrivacyGuides/comments/13x7oe3/who_wants_to_try_out_lemmy_privacyguideslemmyone/). Other “Privacy Guides” communities on other Lemmy servers are not moderated by this team or associated with the website.**\n
        \n
        ---\n
        \n
        **Moderation Rules:**\n
        \n
        1. We prefer posting about open-source software whenever possible.\n
        2. This is not the place for self-promotion if you are not listed on privacyguides.org. If you want to be listed, [make a suggestion on our forum first](https://discuss.privacyguides.net/c/site-development/suggestions/6).\n
        3. No soliciting engagement: Don’t ask for upvotes, follows, etc.\n
        4. Surveys, Fundraising, and Petitions must be **pre**-approved by the mod team.\n
        5. Be civil, no violence, hate speech. Assume people here are posting in good faith.\n
        6. Don’t repost topics which have already been covered here.\n
        7. News posts must be related to privacy and security, and **your post title must match the article headline exactly.** Do not editorialize titles, you can post your opinions in the post body or a comment.\n
        8. Memes/images/video posts that could be summarized as text explanations should not be posted. Infographics and conference talks from reputable sources are acceptable.\n
        9. **No help vampires:** This is not a tech support subreddit, don’t abuse our community’s willingness to help. Questions related to privacy, security or privacy/security related software and their configurations are acceptable.\n
        10. No misinformation: Extraordinary claims must be matched with **evidence.**\n
        11. Do not post about VPNs or cryptocurrencies which are not listed on [privacyguides.org](https://www.privacyguides.org/en/tools/). See Rule 2 for info on adding new recommendations to the website.\n
        12. General guides or software lists are not permitted. Original sources and research about specific topics are allowed as long as they are high quality and factual. **We are not providing a platform for poorly-vetted, out-of-date or conflicting recommendations.**\n
        \n
        ---\n
        \n
        Additional Resources:\n
        \n
        - [EFF: Surveillance Self-Defense](https://ssd.eff.org/)\n
        - [Consumer Reports Security Planner](https://securityplanner.consumerreports.org/)\n
        - [Jonah Aragon](https://www.jonaharagon.com) ([YouTube](https://youtube.com/@jonaharagon))\n
        - [r/Privacy](https://www.reddit.com/r/Privacy)\n
        - [Big Ass Data Broker Opt-Out List](https://github.com/yaelwrites/Big-Ass-Data-Broker-Opt-Out-List)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 259
      +entryCommentCount: 2490
      +postCount: 5
      +postCommentCount: 29
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729537882 {#324
        date: 2024-10-21 21:11:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#304 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#300 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#289 …}
      +entries: Doctrine\ORM\PersistentCollection {#247 …}
      +posts: Doctrine\ORM\PersistentCollection {#205 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#267 …}
      +bans: Doctrine\ORM\PersistentCollection {#184 …}
      +reports: Doctrine\ORM\PersistentCollection {#170 …}
      +badges: Doctrine\ORM\PersistentCollection {#148 …}
      +logs: Doctrine\ORM\PersistentCollection {#138 …}
      +awards: Doctrine\ORM\PersistentCollection {#127 …}
      +categories: Doctrine\ORM\PersistentCollection {#114 …}
      -id: 39
      +apId: "privacyguides@lemmy.one"
      +apProfileId: "https://lemmy.one/c/privacyguides"
      +apPublicUrl: "https://lemmy.one/c/privacyguides"
      +apFollowersUrl: "https://lemmy.one/c/privacyguides/followers"
      +apInboxUrl: "https://lemmy.one/inbox"
      +apDomain: "lemmy.one"
      +apPreferredUsername: "privacyguides"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729576084 {#325
        date: 2024-10-22 07:48:04.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1696630878 {#319
        date: 2023-10-07 00:21:18.0 +02:00
      }
    }
    +image: Proxies\__CG__\App\Entity\Image {#2412 …}
    +domain: Proxies\__CG__\App\Entity\Domain {#1794 …}
    +slug: "QubesOS-Disarm-BusKill-Dead-Man-Switch-with-Keyboard-Shortcut-Guide"
    +title: "[QubesOS] Disarm BusKill Dead Man Switch with Keyboard Shortcut (Guide)"
    +url: "https://www.buskill.in/qubes-disarm/"
    +body: """
      This article describes how to setup keyboard shortcuts in QubesOS so that you can temporarily disarm (pause) the BusKill laptop kill cord.\n
      \n
      This allows the user to, for example, go to the bathroom without causing their computer to shutdown or self-destruct.\n
      \n
      [![Arm  Disarm BusKill in QubesOS](https://www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_featuredImage.jpg)](https://buskill.in/qubes-disarm)\n
      \n
      This is a guide that builds on part one: [A Laptop Kill Cord for QubesOS (1/2)](/qubes-os/). Before reading this, you should already be familiar with how to [setup udev rules for BusKill on QubesOS](https://www.buskill.in/qubes-os/).\n
      \n
      1. [A Laptop Kill Cord for QubesOS (1/2)](/qubes-os/)\n
      2. Disarm BusKill in QubesOS (2/2)\n
      \n
      > ⓘ Note: This post is adapted from its original [article on Tom Hocker's blog](https://humandecoded.io/qubes-os-yubikey-buskill/).\n
      \n
      What is BusKill?\n
      ================\n
      \n
      > What if someone literally steals your laptop while you're working with classified information inside a Whonix DispVM? They'd also be able to recover data from previous DispVMs--as Disposable VM's rootfs virtual files are *not* securely shredded after your DispVM is destroyed.\n
      \n
      Are you a security researcher, journalist, or intelligence operative that works in QubesOS--exploiting Qubes' [brilliant security-through-compartimentalization](https://freedom.press/news/the-operating-system-that-can-protect-you-even-if-you-get-hacked/)to keep your data safe? Do you make use of Whonix [Disposable VMs](https://www.qubes-os.org/doc/disposablevm/) for your work? Great! This post is for you.\n
      \n
      I'm sure your QubesOS laptop has Full Disk Encryption and you're using a strong passphrase. But what if someone literally steals your laptop while you're working with classified information inside a Whonix DispVM? Not only will they get access to all of your AppVM's private data and the currently-running Whonix DispVM's data, but there's a high chance they'd be able to recover data from [previous DispVMs](https://www.whonix.org/wiki/Qubes/DisposableVM#Warnings)--as **Disposable VM's rootfs virtual files ([volatile.img](https://groups.google.com/forum/#!topic/qubes-devel/QwL5PjqPs-4/discussion)) are [*not* securely shredded](https://github.com/QubesOS/qubes-issues/issues/904) after your DispVM is destroyed** by Qubes!\n
      \n
      Let's say you're a journalist, activist, whistleblower, or a human rights worker in an oppressive regime. Or an intelligence operative behind enemy lines doing research or preparing a top-secret document behind a locked door. What do you do to protect your data, sources, or assets when the secret police suddenly batter down your door? How quickly can you *actually* act to shutdown your laptop and shred your RAM and/or FDE encryption keys?\n
      \n
      | [![BusKill Demo](https://www.buskill.in/wp-content/uploads/sites/8/2020/02/busKillDemo.mp4)](https://www.buskill.in/#demo) |\n
      |---|\n
      | *Watch the [BusKill Explainer Video](https://www.buskill.in/#demo) for more info [youtube.com/v/qPwyoD_cQR4](https://www.youtube.com/v/qPwyoD_cQR4)* |\n
      \n
      BusKill utilizes a magnetic trip-wire that tethers your body to your laptop. If you suddenly jump to your feet or fall off your chair (in response to the battering ram crashing through your door) or your laptop is ripped off your table by a group of armed thugs, the data bus' magnetic connection will be severed. This event causes a configurable *trigger* to execute.\n
      \n
      The BusKill `trigger` can be anything from:\n
      \n
      1. locking your screen or\n
      2. shutting down the computer or\n
      3. initiating a [self-destruct](/luks-self-destruct/) sequence\n
      \n
      While our [last post](qubes-os) described how to setup such a system in QubesOS with BusKill, *this* post will describe how to add keyboard shortcuts to arm & disarm the dead man switch (eg so you can go to the bathroom).\n
      \n
      Disclaimer\n
      ==========\n
      \n
      This guide contains experimental files, commands, and software. The information contained in this article may or may not lead to corruption or total permanent deletion of some or all of your data. We've done our best to carefully guide the user so they know the risks of each BusKill trigger, but we cannot be responsible for any data loss that has occurred as a result of following this guide.\n
      \n
      The contents of this guide is provided openly and is licensed under the [CC-BY-SA](https://creativecommons.org/licenses/by-sa/4.0/) license. The software included in this guide is licensed under the [GNU GPLv3](https://www.gnu.org/licenses/gpl-3.0.html) license. All content here is consistent with the limitations of liabilities outlined in its respective licenses.\n
      \n
      We highly recommend that any experiments with the scripts included in this article are used exclusively on a disposable machine containing no valuable data.\n
      \n
      If data loss is a concern for you, then leave now and do not proceed with following this guide. You have been warned.\n
      \n
      Release Note\n
      ------------\n
      \n
      Also be aware that, due to the risks outlined above, BusKill will *not*be released with this "self-destruct" trigger.\n
      \n
      If you [purchase](/buy)a BusKill cable, it will only ship with non-destructive triggers that lock the screen or shutdown the computer. Advanced users can follow guides to add additional destructive triggers, such as the one described in this post, but they should do so at their own risk--taking carefully into consideration all of the warnings outlined above and throughout this article.\n
      \n
      **Again, if you [buy](/buy) a BusKill cable, the worst that can happen is your computer will abruptly shutdown.**\n
      \n
      Assumptions\n
      ===========\n
      \n
      This guide necessarily makes several assumptions outlined below.\n
      \n
      sys-usb\n
      -------\n
      \n
      In this guide, we assume that your QubesOS install has a [USB-Qube](https://www.qubes-os.org/doc/usb-qubes/) named '`sys-usb`' for handling [USB events](https://www.qubes-os.org/doc/usb-devices/) on behalf of `dom0`.\n
      \n
      If you decided to combine your USB and networking Qubes at [install time](https://www.qubes-os.org/doc/installation-guide/#initial-setup), then replace all references in this guide for '`sys-usb`' to '`sys-net`'.\n
      \n
      If you decided to run your '`sys-usb`' VM as a DispoableVM at [install time](https://github.com/QubesOS/qubes-issues/issues/6684#issuecomment-1435381919), then replace all references in this guide for '`sys-usb`' its Disposable TemplateVM (eg '`fedora-36-dvm`').\n
      \n
      …And if you chose not to isolate your USB devices, then [may god help you](https://blog.invisiblethings.org/2011/05/31/usb-security-challenges.html).\n
      \n
      Udev Device Matching\n
      --------------------\n
      \n
      BusKill in Linux uses [udev](https://en.wikipedia.org/wiki/Udev) to detect when the USB's cable is severed. The exact udev rule that you use in the files below will depend on the drive you choose to use in your BusKill cable.\n
      \n
      In this guide, we identify our BusKill-specific drive with the '`ENV{ID_MODEL}==“Micromax_A74”`' [udev property](https://wiki.archlinux.org/index.php/Udev#udev_rule_example). You should replace this property with one that matches your BusKill-specific drive.\n
      \n
      To determine how to query your USB drive for device-specific identifiers, see [Introducing BusKill: A Kill Cord for your Laptop](/buskill-laptop-kill-cord-dead-man-switch/#software). Note that the ``udevadm monitor --environment --udev`` command should be run in the '`sys-usb`' Qube.\n
      \n
      > ⓘ Note: If you'd prefer to buy a BusKill cable than make your own, you can buy one fully assembled [here](/buy).\n
      \n
      QubesOS Version\n
      ---------------\n
      \n
      This guide was written for QubesOS v4.1.\n
      \n
      ```\n
      \n
      <span style="color:#323232;">[user@dom0 ~]$ cat /etc/redhat-release Qubes release 4.1.2 (R4.1)\n
      </span><span style="color:#323232;">[user@dom0 ~]$\n
      </span>\n
      ```\n
      \n
      BusKill Files\n
      =============\n
      \n
      This section will describe what files should be created and where.\n
      \n
      Due to the design of QubesOS, it takes a bit of mental gymnastics to understand what we're doing and why. It's important to keep in mind that, in QubesOS\n
      \n
      1. The keyboard and UI are configured in '`dom0’`\n
      2. USB devices (like the BusKill device) are routed to the '`sys-usb`' VM\n
      3. dom0 has the privilege to execute scripts inside other VMs (eg '`sys-usb`')\n
      4. By design, VMs should *not* be able to send arbitrary commands to be executed in dom0\n
      5. .…but via the [qubes-rpc](https://www.qubes-os.org/doc/qrexec/#qubes-rpc-services), we *can* permit some VMs (eg '`sys-usb`') to execute a script in dom0 (though for security reasons, ideally such that no data/input is sent from the less-trusted VM to dom0 -- other than the name of the script)\n
      \n
      Due to the constraints listed above:\n
      \n
      1. We'll be configuring the disarm button as keyboard shortcut in dom0\n
      2. We'll be saving and executing the '`buskill-disarm.sh`' script in '`sys-usb`' (because these scripts manipulate our udev rules)\n
      3. The keyboard shortcut in dom0 will *actually* be executing the above script in '`sys-usb`'\n
      \n
      sys-usb\n
      -------\n
      \n
      If you followed our [previous guide to setting-up BusKill in QubesOS](/qubes-os/), then you should already have a file in '`sys-usb`' at '`/rw/config/buskill.rules`'. You may even have modified it to trigger a [LUKS Self-Destruct](/luks-self-destruct/) on removal of your BusKill device.\n
      \n
      Because you're *now* experimenting with a new setup, let's go ahead and wipe out that old file with a new one that *just* executes a soft-shutdown. You might need some days to get used to the new disarm procedure, and you probably don't want to suddenly loose all your data due to an accidental false-positive!\n
      \n
      Execute the following on your '`sys-usb`' Qube:\n
      \n
      ```\n
      \n
      <span style="color:#323232;">mv /rw/config/buskill.rules /rw/config/buskill.rules.bak.`date "+%Y%m%d_%H%M%S"`\n
      </span><span style="color:#323232;">cat &lt;&lt; EOF | sudo tee /rw/config/buskill.rules\n
      </span><span style="color:#323232;">################################################################################\n
      </span><span style="color:#323232;"># File:    sys-usb:/etc/udev/rules.d/buskill.rules -> /rw/config/buskill.rules\n
      </span><span style="color:#323232;"># Purpose: Add buskill rules. For more info, see: https://buskill.in/qubes-os/\n
      </span><span style="color:#323232;"># Authors: Michael Altfield \n
      </span><span style="color:#323232;"># Created: 2020-01-02\n
      </span><span style="color:#323232;"># License: GNU GPLv3\n
      </span><span style="color:#323232;">################################################################################\n
      </span><span style="color:#323232;">ACTION=="remove", SUBSYSTEM=="usb", ENV{ID_MODEL}=="Micromax_A74", RUN+="/usr/bin/qrexec-client-vm dom0 buskill.softShutdown"\n
      </span><span style="color:#323232;">EOF\n
      </span><span style="color:#323232;">sudo ln -s /rw/config/buskill.rules /etc/udev/rules.d/\n
      </span><span style="color:#323232;">sudo udevadm control --reload\n
      </span>\n
      ```\n
      \n
      Now, let's add a new udev '`.rules`' file. This one will always *just* lock your screen, and it's what will be put in-place when BusKill is "disarmed".\n
      \n
      Execute the following on your '`sys-usb`' Qube:\n
      \n
      ```\n
      \n
      <span style="color:#323232;">cat &lt;&lt; EOF | sudo tee /rw/config/buskill.lock.rules\n
      </span><span style="color:#323232;">################################################################################\n
      </span><span style="color:#323232;"># File:    sys-usb:/etc/udev/rules.d/buskill.rules -> /rw/config/buskill.lock.rules\n
      </span><span style="color:#323232;"># Purpose: Just lock the screen. For more info, see: https://buskill.in/qubes-os/\n
      </span><span style="color:#323232;"># Authors: Michael Altfield \n
      </span><span style="color:#323232;"># Created: 2023-05-10\n
      </span><span style="color:#323232;"># License: GNU GPLv3\n
      </span><span style="color:#323232;">################################################################################\n
      </span><span style="color:#323232;">ACTION=="remove", SUBSYSTEM=="usb", ENV{ID_MODEL}=="Micromax_A74", RUN+="/usr/bin/qrexec-client-vm dom0 buskill.lock"\n
      </span><span style="color:#323232;">EOF\n
      </span>\n
      ```\n
      \n
      The careful reader will see that we're not *actually* disarming BusKill in the same sense as our [BusKill GUI app](https://github.com/buskill/buskill-app/). Indeed, what we're *actually* going to do is swap these two files for 30 seconds.\n
      \n
      This way, if BusKill is armed and you remove the cable, your computer shuts-down.\n
      \n
      But if you want to disarm, the procedure becomes:\n
      \n
      1. Hit the "Disarm BusKill" keyboard shortcut (see below)\n
      2. Wait for the toast popup message indicating that BusKill is now disarmed\n
      3. Remove the cable within 30 seconds\n
      4. Your screen locks (instead of shutting down)\n
      \n
      Personally, I can't think of a QubesOS user that would want to leave their machine unlocked when they go to the bathroom, so I figured this approach would work better than an *actual* disarm.\n
      \n
      Bonus: when you return from your break, just plug-in the BusKill cable in, and it'll already be armed (reducing the risk of user error due to forgetting to arm BusKill).\n
      \n
      Now, let's add the actual '`buskill-disarm.sh`' script to disarm BusKill:\n
      \n
      Execute the following on your '`sys-usb`' Qube:\n
      \n
      ```\n
      \n
      <span style="color:#323232;">cat &lt;&lt; EOF | sudo tee /usr/local/bin/buskill-disarm.sh\n
      </span><span style="color:#323232;">#!/bin/bash\n
      </span><span style="color:#323232;"> \n
      </span><span style="color:#323232;">################################################################################\n
      </span><span style="color:#323232;"># File:    sys-usb:/usr/local/bin/buskill-disarm.sh\n
      </span><span style="color:#323232;"># Purpose: Temp disarm BusKill. For more info, see: https://buskill.in/qubes-os/\n
      </span><span style="color:#323232;"># Authors: Tom \n
      </span><span style="color:#323232;"># Co-Auth: Michael Altfield \n
      </span><span style="color:#323232;"># Created: 2023-05-10\n
      </span><span style="color:#323232;"># License: GNU GPLv3\n
      </span><span style="color:#323232;">################################################################################\n
      </span><span style="color:#323232;"> \n
      </span><span style="color:#323232;"># replace the 'shutdown' trigger with the 'lock' trigger\n
      </span><span style="color:#323232;">sudo rm /etc/udev/rules.d/buskill.rules\n
      </span><span style="color:#323232;">sudo ln -s /rw/config/buskill.lock.rules /etc/udev/rules.d/buskill.rules\n
      </span><span style="color:#323232;">sudo udevadm control --reload\n
      </span><span style="color:#323232;"> \n
      </span><span style="color:#323232;"># let the user know that BusKill is now temporarily disarmed\n
      </span><span style="color:#323232;">notify-send -t 21000 "BusKill" "Disarmed for 30 seconds" -i changes-allow\n
      </span><span style="color:#323232;"> \n
      </span><span style="color:#323232;"># wait 30 seconds\n
      </span><span style="color:#323232;">sleep 30\n
      </span><span style="color:#323232;"> \n
      </span><span style="color:#323232;"># replace the 'lock' trigger with the 'shutdown' trigger\n
      </span><span style="color:#323232;">sudo rm /etc/udev/rules.d/buskill.rules\n
      </span><span style="color:#323232;">sudo ln -s /rw/config/buskill.rules /etc/udev/rules.d/buskill.rules\n
      </span><span style="color:#323232;">sudo udevadm control --reload\n
      </span><span style="color:#323232;">notify-send -t 5000 "BusKill" "BusKill is Armed" -i changes-prevent\n
      </span><span style="color:#323232;">EOF\n
      </span><span style="color:#323232;">sudo chmod +x /usr/local/bin/buskill-disarm.sh\n
      </span>\n
      ```\n
      \n
      dom0\n
      ----\n
      \n
      If you followed our [previous guide to setting-up BusKill in QubesOS](/qubes-os/), then you shouldn't need to add any files to dom0. What you *do* need to do is setup some keyboard shortcuts.\n
      \n
      In the QubesOS GUI, click on the big `Q` "Start Menu" in the top-left of your XFCE panel to open the Applications menu. Navigate to '`System Tools`' and click Keyboard\n
      \n
      | [![Screenshot of QubesOS with an arrow pointing to the “Q” Application Menu in the very top-left of the screen](https://www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_menu1.png)](https://buskill.in/qubes-disarm) | [![Screenshot of QubesOS Application Menu with “System Tools -> Keyboard” highlighted](https://www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_menu2.png)](https://www.buskill.in/qubes-disarm/) |\n
      |---|---|\n
      | Click the “Q” to open the QubesOS Application Menu | Click System Tools -&gt; Keyboard |\n
      \n
      Click the '`Application Shortcuts`' Tab and then click the '`+ Add`' button on the bottom-left of the window.\n
      \n
      | [![Screenshot of QubesOS Keyboard Settings Window that shows the “Application Shortcuts” tab highlighted’alt](https://www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings1.png)](https://www.buskill.in/qubes-disarm/) | [![Screenshot of QubesOS Keyboard Settings Window that shows the “+ Add” button highlightedalt](https://www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-add1.jpg.png)](https://www.buskill.in/qubes-disarm/) |\n
      |---|---|\n
      | Click the “Application Shortcuts” tab to add a Keyboard Shortcut in Qubes | Click the “Add” Button to add a new Keyboard Shortcut in Qubes |\n
      \n
      In the '`Command`' input field, type the following\n
      \n
      ```\n
      \n
      <span style="color:#323232;">qvm-run sys-usb buskill-disarm.sh\n
      </span>\n
      ```\n
      \n
      The above command will execute a command in '`dom0`' that will execute a command in '`sys-usb`' that will execute the '`buskill-disarm.sh`' script that we created above.\n
      \n
      | [![Screenshot of QubesOS Keyboard Settings Window that shows the OK button highlighted](https://www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-add2.png)](https://www.buskill.in/qubes-disarm/) |\n
      |---|\n
      | After typing the command to be executed when the keyboard shortcut is pressed, click the "OK" button |\n
      \n
      Now click "OK" and, when prompted, type Ctrl+Shift+D (or whatever keyboard shortcut you want to bind to "Disarming BusKill").\n
      \n
      | [![Screenshot of QubesOS Keyboard Settings Window that shows the prompt "Press now the keyboard keys you want to use to trigger the command…"alt](https://www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-add3.png)](https://www.buskill.in/qubes-disarm/) | [![Screenshot of QubesOS Keyboard Settings Window that shows the selected Shortcut "Shift+Ctrl+D"](https://www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-add4.png)](https://www.buskill.in/qubes-disarm/) |\n
      |---|---|\n
      | Type “Ctrl+Shift+D” or whatever keyboard shortcut you want to trigger BusKill to be disarmed for 30 seconds |  |\n
      \n
      You should now have a keyboard shortcut binding for disarming BusKill!\n
      \n
      [![Screenshot of QubesOS\n
      Keyboard Settings Window that shows the newly created keyboard shortcut\n
      for Shift+Ctrl+D at the top of the\n
      list](https://www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-added1.png)](https://www.buskill.in/qubes-disarm/)\n
      \n
      Test It!\n
      ========\n
      \n
      At this point, you can test your new (temporary) BusKill Disarm functionality by:\n
      \n
      1. Plugging-in your BusKill cable\n
      2. Typing Ctrl+Shift+D\n
      3. Waiting for the toast popup message to appear indicating that BusKill is disarmed for 30 seconds\n
      4. Unplugging your BusKill cable\n
      \n
      Your machine should lock, not shutdown.\n
      \n
      | [![Screenshot of QubesOS with a toast message in the top-right that says BusKill Disarmed for 30 Seconds](https://www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_buskill-disarmed1.png)](https://www.buskill.in/qubes-disarm/) |\n
      |---|\n
      | After hitting the keyboard shortcut to disarm BusKill, you have 30 seconds to remove the cable |\n
      \n
      After 30 seconds, return to your computer and test the normal "arm" functionality:\n
      \n
      1. Plug-in your BusKill cable\n
      2. Unlock your screen\n
      3. Unplug your BusKill cable\n
      \n
      Your computer should shutdown, not lock.\n
      \n
      | [![Screenshot of QubesOS with a toast message in the top-right that says BusKill is Armed](https://www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_buskill-armed1.png)](https://www.buskill.in/qubes-disarm/) |\n
      |---|\n
      | 30 seconds after hitting the keyboard shortcut, BusKill will arm itself |\n
      \n
      Troubleshooting\n
      ===============\n
      \n
      Is unplugging your USB device doing nothing? Having other issues?\n
      \n
      See the [Troubleshooting section](https://buskill.in/qubes-os/#troubleshooting) in our original guide to using BusKill on QubesOS.\n
      \n
      Limitations/Improvements\n
      ========================\n
      \n
      Security is porous. All software has bugs. Nothing is 100% secure. For more limitations to using BusKill on QubesOS, see the [Limitations section](https://busill.in/qubes-os/#limitations) in our original guide to using BusKill on QubesOS.\n
      \n
      Buy a BusKill Cable\n
      ===================\n
      \n
      We look forward to continuing to improve the BusKill software and making BusKill more accessible this year. If you want to help, [please consider purchasing a BusKill cable](https://buskill.in/buy) for yourself or a loved one. It helps us fund further development, and you get your own BusKill cable to keep you or your loved ones safe.\n
      \n
      You can also buy a BusKill cable with bitcoin, monero, and other altcoins from our [BusKill Store’s .onion site](http://buskillvampfih2iucxhit3qp36i2zzql3u6pmkeafvlxs3tlmot5yad.onion/buy/).\n
      \n
      Stay safe,  \n
      The BusKill Team  \n
      [www.buskill.in](https://www.buskill.in/)  \n
      [buskillvampfih2iucxhit3qp36i2zzql3u6pmkeafvlxs3tl…](http://www.buskillvampfih2iucxhit3qp36i2zzql3u6pmkeafvlxs3tlmot5yad.onion)
      """
    +type: "link"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 0
    +favouriteCount: 4
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1696353188 {#1870
      date: 2023-10-03 19:13:08.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1843 …}
    +votes: Doctrine\ORM\PersistentCollection {#1879 …}
    +reports: Doctrine\ORM\PersistentCollection {#1885 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1395 …}
    +notifications: Doctrine\ORM\PersistentCollection {#1890 …}
    +badges: Doctrine\ORM\PersistentCollection {#1935 …}
    +children: []
    -id: 3502
    -titleTs: "'buskil':3 'dead':4 'disarm':2 'guid':10 'keyboard':8 'man':5 'qubeso':1 'shortcut':9 'switch':6"
    -bodyTs: "'-01':1485 '-02':1486 '-05':1581,1821 '-10':1582,1822 '-36':936 '/#demo)':408 '/)':2618 '/2011/05/31/usb-security-challenges.html).':955 '/bin/bash':1795 '/buskill-laptop-kill-cord-dead-man-switch':1058 '/buskill/buskill-app/).':1623 '/buy':745,811,1099 '/buy)':2559 '/buy/).':2609 '/doc/disposablevm/)':208 '/doc/installation-guide/#initial-setup),':885 '/doc/qrexec/#qubes-rpc-services),':1228 '/doc/usb-devices/)':865 '/doc/usb-qubes/)':854 '/etc/redhat-release':1112 '/etc/udev/rules.d':1508 '/etc/udev/rules.d/buskill.rules':1467,1562,1836,1841,1885,1890 '/forum/#!topic/qubes-devel/qwl5pjqps-4/discussion))':305 '/index.php/udev#udev_rule_example).':1021 '/licenses/by-sa/4.0/)':639 '/licenses/gpl-3.0.html)':655 '/luks-self-destruct':505,1370 '/news/the-operating-system-that-can-protect-you-even-if-you-get-hacked/)to':193 '/qubes-os':68,98,1343,1927 '/qubes-os-yubikey-buskill/).':122 '/qubes-os/':1479,1575,1811 '/qubes-os/#limitations)':2515 '/qubes-os/#troubleshooting)':2479 '/qubes-os/).':89 '/qubesos/qubes-issues/issues/6684#issuecomment-1435381919),':919 '/qubesos/qubes-issues/issues/904)':312 '/rw/config/buskill.lock.rules':1557,1563,1840 '/rw/config/buskill.rules':1356,1449,1462,1468,1507,1889 '/rw/config/buskill.rules.bak':1450 '/usr/bin/qrexec-client-vm':1500,1596 '/usr/local/bin/buskill-disarm.sh':1794,1800,1912 '/v/qpwyod_cqr4](https://www.youtube.com/v/qpwyod_cqr4)*':414 '/wiki/qubes/disposablevm#warnings)--as':295 '/wiki/udev)':966 '/wp-content/uploads/sites/8/2020/02/buskilldemo.mp4)](https://www.buskill.in/#demo)':400 '/wp-content/uploads/sites/8/qubes-disarm_buskill-armed1.png)](https://www.buskill.in/qubes-disarm/)':2450 '/wp-content/uploads/sites/8/qubes-disarm_buskill-disarmed1.png)](https://www.buskill.in/qubes-disarm/)':2379 '/wp-content/uploads/sites/8/qubes-disarm_featuredimage.jpg)](https://buskill.in/qubes-disarm)':51 '/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-add1.jpg.png)](https://www.buskill.in/qubes-disarm/)':2082 '/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-add2.png)](https://www.buskill.in/qubes-disarm/)':2164 '/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-add3.png)](https://www.buskill.in/qubes-disarm/)':2229 '/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-add4.png)](https://www.buskill.in/qubes-disarm/)':2246 '/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-added1.png)](https://www.buskill.in/qubes-disarm/)':2302 '/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings1.png)](https://www.buskill.in/qubes-disarm/)':2067 '/wp-content/uploads/sites/8/qubes-disarm_menu1.png)](https://buskill.in/qubes-disarm)':2005 '/wp-content/uploads/sites/8/qubes-disarm_menu2.png)](https://www.buskill.in/qubes-disarm/)':2018 '1':90,488,1163,1276,1665,2318,2409 '1/2':67,97 '100':2499 '2':99,493,1172,1289,1674,2325,2416 '2/2':104 '2020':1484 '2023':1580,1820 '21000':1860 '3':499,1187,1310,1687,2330,2420 '30':1638,1692,1864,1871,1874,2264,2345,2375,2390,2397,2451 '4':1202,1694,2347 '4.1.2':1115 '5':1219 '5000':1899 'a74':1016,1498,1594 'abl':148,286,1209 'abrupt':824 'access':259,2543 'accident':1435 'act':383 'action':1490,1586 'activist':327 'actual':382,1317,1609,1628,1735,1775 'adapt':110 'add':531,772,1470,1516,1773,1934,2041,2077,2089,2097,2100 'addit':773 'advanc':766 'ahead':1389 'allow':24,1869 'alreadi':74,1347,1755 'also':146,721,2589 'alt':2064,2226 'altcoin':2599 'altfield':1482,1578,1818 'alway':1525 'and/or':392 'anyth':486 'app':1620 'appear':2338 'applic':1973,1992,2009,2026,2034,2060,2085 'approach':1729 'appvm':264 'arbitrari':1212 'arm':44,463,535,1645,1757,1768,1903,2407,2447,2460 'arrow':1987 'articl':2,114,563,684,806 'assembl':1097 'asset':368 'assum':842 'assumpt':826,832 'auth':1816 'author':1480,1576,1812 'awar':723 'bathroom':33,548,1724 'batter':374,445 'becom':1664 'behalf':867 'behind':342,354 'best':586 'better':1732 'big':1957 'bind':2199,2273 'bit':1141 'bitcoin':2595 'blog':119 'blog.invisiblethings.org':954 'blog.invisiblethings.org/2011/05/31/usb-security-challenges.html).':953 'bodi':425 'bonus':1737 'bottom':2046 'bottom-left':2045 'break':1743 'brilliant':186 'bug':2496 'build':57 'bus':467 'busill.in':2514 'busill.in/qubes-os/#limitations)':2513 'buskil':19,46,84,101,125,396,403,415,482,524,599,731,747,813,959,998,1007,1033,1051,1086,1119,1177,1340,1375,1471,1541,1611,1618,1643,1669,1683,1749,1769,1780,1804,1851,1861,1900,1901,1924,2202,2259,2276,2314,2323,2341,2350,2372,2387,2414,2423,2445,2458,2486,2506,2522,2527,2537,2541,2555,2577,2592,2602,2613 'buskill-disarm.sh':1297,1776,2121,2144 'buskill-specif':1006,1032 'buskill.in':1478,1574,1810,2478,2558 'buskill.in/buy)':2557 'buskill.in/qubes-os/':1477,1573,1809 'buskill.in/qubes-os/#troubleshooting)':2477 'buskill.lock':1598 'buskill.softshutdown':1502 'buskillvampfih2iucxhit3qp36i2zzql3u6pmkeafvlxs3tl':2619 'buskillvampfih2iucxhit3qp36i2zzql3u6pmkeafvlxs3tlmot5yad.onion':2608 'buskillvampfih2iucxhit3qp36i2zzql3u6pmkeafvlxs3tlmot5yad.onion/buy/).':2607 'button':1283,2042,2078,2098,2160,2181 'buy':810,1084,1094,2525,2590 'cabl':748,814,973,999,1087,1650,1690,1750,2324,2351,2395,2415,2424,2528,2556,2578,2593 'cannot':603 'care':588,794,1601 'cat':1111,1458,1553,1790 'caus':35,475 'cc':634 'cc-by-sa':633 'chair':440 'chanc':282 'chang':1868,1906 'changes-allow':1867 'changes-prev':1905 'chmod':1910 'choos':993 'chose':941 'classifi':138,248 'click':1954,1980,2019,2028,2032,2039,2083,2095,2178,2183 'co':1815 'co-auth':1814 'combin':874 'command':555,1067,1213,2109,2124,2128,2135,2168,2225 'compartiment':190 'comput':37,497,765,822,1652,2402,2426 'concern':701 'configur':477,1169,1280 'connect':469 'consid':2552 'consider':796 'consist':661 'constraint':1273 'contain':552,560,692 'content':621,658 'continu':2533 'control':1511,1844,1893 'cord':22,64,94,1054 'corrupt':570 'crash':447 'creat':1129,1483,1579,1819,2148,2287 'creativecommons.org':638 'creativecommons.org/licenses/by-sa/4.0/)':637 'ctrl':2189,2242,2248,2292,2327 'current':271 'currently-run':270 'd':145,284,1081,1454,2191,2243,2250,2293,2329 'data':151,196,267,276,289,365,466,581,608,695,697,1431 'data/input':1252 'date':1451 'day':1411 'dead':538 'decid':872,903 'delet':574 'demo':397 'depend':988 'describ':3,514,528,780,1124 'design':1135,1204 'destroy':170,317 'destruct':43,504,740,756,774,1369 'detect':968 'determin':1037 'develop':2571 'devic':947,957,1046,1174,1178,1376,2467 'device-specif':1045 'disarm':16,45,100,536,1282,1418,1543,1610,1661,1668,1686,1736,1779,1803,1855,1862,2201,2262,2275,2315,2343,2373,2386 'disclaim':549 'disk':226 'dispoablevm':913 'dispos':156,204,296,690,932 'dispvm':143,154,168,253,274,292,315 'document':353 'dom0':869,1110,1118,1171,1188,1218,1243,1262,1288,1315,1501,1597,1913,1938,2130 'done':584 'door':357,377,450 'drive':991,1009,1035,1043 'due':725,1132,1270,1432,1764 'dvm':937 'eg':541,934,1198,1234 'en.wikipedia.org':965 'en.wikipedia.org/wiki/udev)':964 'encrypt':227,394 'enemi':343 'env':1012,1494,1590 'environ':1065 'eof':1459,1503,1554,1599,1791,1908 'error':1763 'even':1359 'event':474,862 'exact':977 'exampl':29 'exclus':687 'execut':480,1193,1216,1239,1295,1319,1402,1439,1544,1781,2126,2133,2142,2171 'experi':677,1381 'experiment':553 'explain':404 'exploit':184 'fall':437 'fals':1437 'false-posit':1436 'familiar':76 'fde':393 'fedora':935 'feet':435 'field':2111 'figur':1727 'file':161,301,554,985,1120,1126,1350,1395,1463,1521,1558,1636,1796,1936 'follow':617,712,769,1332,1441,1546,1783,1916,2114 'forget':1766 'forward':2531 'freedom.press':192 'freedom.press/news/the-operating-system-that-can-protect-you-even-if-you-get-hacked/)to':191 'full':225 'fulli':1096 'function':2316,2408 'fund':2569 'get':258,1413,2574 'github.com':311,918,1622 'github.com/buskill/buskill-app/).':1621 'github.com/qubesos/qubes-issues/issues/6684#issuecomment-1435381919),':917 'github.com/qubesos/qubes-issues/issues/904)':310 'gnu':651,1488,1584,1824 'go':30,545,1388,1629,1721 'god':950 'gplv3':652,1489,1585,1825 'great':212 'group':461 'groups.google.com':304 'groups.google.com/forum/#!topic/qubes-devel/qwl5pjqps-4/discussion))':303 'gui':1619,1953 'guid':55,551,589,619,624,646,714,770,828,840,892,926,1002,1103,1335,1919,2483,2519 'gymnast':1144 'h':1455 'handl':860 'happen':819 'help':951,2550,2567 'high':281,673 'highlight':2015,2063,2161 'highlightedalt':2079 'hit':1666,2381,2454 'hocker':117 'human':331 'humandecoded.io':121 'humandecoded.io/qubes-os-yubikey-buskill/).':120 'id':1013,1495,1591 'ideal':1248 'identifi':1004,1048 'import':1155 'improv':2535 'in-plac':1537 'includ':643,681 'inde':1624 'indic':1681,2339 'info':411,1475,1571,1807 'inform':139,249,559 'initi':500 'input':2110 'insid':140,250,1195 'instal':846,881,915 'instead':1698 'intellig':178,340 'introduc':1050 'isol':944 'issu':2472 'journalist':176,326 'jump':432 'keep':194,1157,2580 'key':395,2217 'keyboard':7,532,1165,1285,1312,1670,1948,1981,2014,2031,2054,2071,2091,2103,2153,2174,2194,2206,2216,2233,2253,2271,2280,2288,2383,2456 'kill':21,63,93,1053 'know':594,1849 'laptop':20,62,92,132,223,242,387,428,453,1057 'last':509 'lead':568 'leav':705,1715 'left':1965,1999,2047 'less':1258 'less-trust':1257 'let':320,1386,1514,1771,1846 'liabil':666 'licens':630,640,648,656,671,1487,1583,1823 'like':1175 'limit':664,2503,2511 'limitations/improvements':2489 'line':344 'linux':961 'list':1274,2299 'liter':129,239 'll':1278,1291,1754 'ln':1505,1838,1887 'lock':356,489,759,1527,1566,1697,1832,1877,2355,2430 'look':2530 'loos':1428 'loss':609,698 'love':2564,2584 'luk':1366 'm':219,1453,1456 'machin':691,1717,2353 'magnet':418,468 'make':200,830,1089,2540 'man':539 'manipul':1306 'match':958,1030 'may':564,566,949,1358 'mental':1143 'menu':1960,1974,1993,2010,2027 'messag':1680,2336,2364,2437 'michael':1481,1577,1817 'micromax':1015,1497,1593 'might':1408 'mind':1159 'model':1014,1496,1592 'modifi':1361 'monero':2596 'monitor':1064 'mv':1448 'name':855,1266 'navig':1975 'necessarili':829 'need':1409,1932,1942 'net':900 'network':878 'new':1384,1398,1417,1518,2102,2312 'newli':2286 'non':755 'non-destruct':754 'normal':2406 'note':106,720,1060,1078 'noth':2469,2497 'notifi':1857,1896 'notify-send':1856,1895 'occur':612 'ok':2159,2180,2184 'old':1394 'one':60,779,1028,1095,1399,1523,2565,2585 'onion':2605 'open':627,1971,2023 'oper':179,341 'oppress':336 'origin':113,2482,2518 'os':513 'outlin':667,729,801,833 'panel':1969 'part':59 'passphras':234 'paus':17 'perman':573 'permit':1231 'person':1702 'place':1539 'pleas':2551 'plug':1746,2320,2411 'plug-in':1745,2410 'plugging-in':2319 'point':1988,2307 'polic':372 'popup':1679,2335 'porous':2492 'posit':1438 'post':108,214,510,526,783 'prefer':1082 'prepar':348 'press':2177,2213 'prevent':1907 'previous':153,291,1334,1918 'privat':266 'privileg':1191 'probabl':1422 'procedur':1419,1663 'proceed':710 'prompt':2187,2212 'properti':1018,1026 'protect':363 'provid':626 'purchas':744,2553 'purpos':1469,1564,1801 'put':1536 'q':1958,1991,2021 'qube':185,319,512,851,879,1076,1113,1224,1447,1552,1789,2094,2106 'qubes-o':511 'qubes-rpc':1223 'qubeso':10,48,66,86,96,103,183,222,522,845,1100,1107,1137,1162,1342,1709,1926,1952,1984,2008,2025,2053,2070,2152,2205,2232,2279,2360,2433,2488,2508,2524 'queri':1040 'quick':379 'qvm':2116 'qvm-run':2115 'r4.1':1116 'ram':391,446 're':135,230,245,324,1149,1379,1607,1627 'read':70 'reader':1602 'reason':1247 'recommend':674 'recov':150,288 'reduc':1758 'refer':889,923 'regim':337 'releas':719,735,1114 'reload':1512,1845,1894 'remov':1372,1491,1587,1648,1688,2393 'replac':887,921,1024,1826,1875 'research':175,346 'respect':670 'respons':442,605 'result':615 'return':1740,2399 'right':332,2369,2442 'rip':455 'risk':596,728,792,1760 'rm':1835,1884 'rootf':159,299 'rout':1180 'rpc':1225 'rule':82,979,1309,1472,1520 'run':272,905,1070,1499,1595,2117 'sa':636 'safe':197,2586,2611 'save':1293 'say':322,2371,2444 'screen':491,761,1529,1568,1696,2002,2419 'screenshot':1982,2006,2051,2068,2150,2203,2230,2277,2358,2431 'script':680,1194,1241,1269,1298,1305,1322,1777,2145 'second':1639,1693,1865,1872,2265,2346,2376,2391,2398,2452 'secret':352,371 'section':1122,2476,2512 'secur':164,174,188,308,1246,2490,2500 'security-through-compartiment':187 'see':1049,1476,1572,1604,1672,1808,2473,2509 'select':2239 'self':42,503,739,1368 'self-destruct':41,502,738,1367 'send':1211,1858,1897 'sens':1615 'sent':1254 'sequenc':506 'set':1338,1922,2055,2072,2154,2207,2234,2281 'setting-up':1337,1921 'setup':6,80,517,1385,1946 'sever':472,831,975 'shift':2190,2241,2249,2291,2328 'ship':752 'shortcut':8,533,1286,1313,1671,1949,2035,2061,2086,2092,2104,2175,2195,2240,2254,2272,2289,2384,2457 'shouldn':1930 'show':2058,2075,2157,2210,2237,2284 'shred':165,309,389 'shut':494,1654,1700 'shutdown':39,385,763,825,1406,1828,1881,2357,2428 'shuts-down':1653 'site':2606 'sleep':1873 'soft':1405 'soft-shutdown':1404 'softwar':557,642,1059,2494,2538 'someon':128,238 'sourc':366 'specif':1008,1034,1047 'start':1959 'stay':2610 'steal':130,240 'store':2603 'strong':233 'subsystem':1492,1588 'sudden':373,431,1427 'sudo':1460,1504,1509,1555,1792,1834,1837,1842,1883,1886,1891,1909 'sure':220 'swap':1633 'switch':540 'sys':836,857,895,899,908,929,1074,1184,1200,1236,1301,1325,1328,1353,1445,1465,1550,1560,1787,1798,2119,2138 'sys-net':898 'sys-usb':835,856,894,907,928,1073,1183,1199,1235,1300,1324,1327,1352,1444,1464,1549,1559,1786,1797,2118,2137 'system':520,1977,2012,2029 'tab':2036,2062,2087 'tabl':458 'take':793,1139 'team':2614 'tee':1461,1556,1793 'temp':1802 'templatevm':933 'temporari':2313 'temporarili':15,1854 'test':2303,2310,2404 'tether':423 'think':1706 'though':1244 'throughout':804 'thug':464 'time':882,916 'toast':1678,2334,2363,2436 'tom':116,1813 'tool':1978,2013,2030 'top':351,1964,1998,2296,2368,2441 'top-left':1963,1997 'top-right':2367,2440 'top-secret':350 'total':572 'trigger':478,483,600,741,757,775,1364,1829,1833,1878,1882,2223,2258 'trip':420 'trip-wir':419 'troubleshoot':2462,2475 'trust':1259 'two':1635 'type':2112,2166,2188,2247,2326 'udev':81,956,963,978,1017,1066,1308,1519 'udevadm':1063,1510,1843,1892 'ui':1167 'understand':1146 'unlock':1718,2417 'unplug':2348,2421,2464 'us':2568 'usb':837,850,858,861,876,896,909,930,946,971,1042,1075,1173,1185,1201,1237,1302,1326,1329,1354,1446,1466,1493,1551,1561,1589,1788,1799,2120,2139,2466 'usb-qub':849 'use':201,231,686,962,982,995,1414,2221,2485,2505,2521 'user':26,591,767,1109,1117,1710,1762,1848 'util':416 'v4.1':1108 'valuabl':694 've':583 'version':1101 'via':1221 'video':405 'virtual':160,300 'vm':157,297,910,1186,1260 'vms':205,1197,1205,1233 'volatile.img':302 'wait':1675,1870,2331 'want':1425,1659,1713,2197,2219,2256,2548 'warn':718,800 'watch':401 'way':1641 'whatev':2193,2252 'whistleblow':328 'whonix':142,203,252,273 'wiki.archlinux.org':1020 'wiki.archlinux.org/index.php/udev#udev_rule_example).':1019 'window':2050,2056,2073,2155,2208,2235,2282 'wipe':1391 'wire':421 'within':1691 'without':34 'work':136,181,211,246,1731 'worker':333 'worst':816 'would':1712,1730 'written':1105 'www.buskill.in':50,88,399,407,2004,2017,2066,2081,2163,2228,2245,2301,2378,2449,2615,2617 'www.buskill.in/#demo)':406 'www.buskill.in/)':2616 'www.buskill.in/qubes-os/).':87 'www.buskill.in/wp-content/uploads/sites/8/2020/02/buskilldemo.mp4)](https://www.buskill.in/#demo)':398 'www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_buskill-armed1.png)](https://www.buskill.in/qubes-disarm/)':2448 'www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_buskill-disarmed1.png)](https://www.buskill.in/qubes-disarm/)':2377 'www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_featuredimage.jpg)](https://buskill.in/qubes-disarm)':49 'www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-add1.jpg.png)](https://www.buskill.in/qubes-disarm/)':2080 'www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-add2.png)](https://www.buskill.in/qubes-disarm/)':2162 'www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-add3.png)](https://www.buskill.in/qubes-disarm/)':2227 'www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-add4.png)](https://www.buskill.in/qubes-disarm/)':2244 'www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-added1.png)](https://www.buskill.in/qubes-disarm/)':2300 'www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings1.png)](https://www.buskill.in/qubes-disarm/)':2065 'www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_menu1.png)](https://buskill.in/qubes-disarm)':2003 'www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_menu2.png)](https://www.buskill.in/qubes-disarm/)':2016 'www.buskillvampfih2iucxhit3qp36i2zzql3u6pmkeafvlxs3tlmot5yad.onion':2620 'www.gnu.org':654 'www.gnu.org/licenses/gpl-3.0.html)':653 'www.qubes-os.org':207,853,864,884,1227 'www.qubes-os.org/doc/disposablevm/)':206 'www.qubes-os.org/doc/installation-guide/#initial-setup),':883 'www.qubes-os.org/doc/qrexec/#qubes-rpc-services),':1226 'www.qubes-os.org/doc/usb-devices/)':863 'www.qubes-os.org/doc/usb-qubes/)':852 'www.whonix.org':294 'www.whonix.org/wiki/qubes/disposablevm#warnings)--as':293 'x':1911 'xfce':1968 'y':1452 'year':2545 'youtube.com':413 'youtube.com/v/qpwyod_cqr4](https://www.youtube.com/v/qpwyod_cqr4)*':412 'ⓘ':105,1077"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1696362188
    +visibility: "visible             "
    +apId: "https://monero.town/post/703020"
    +editedAt: null
    +createdAt: DateTimeImmutable @1696353188 {#118
      date: 2023-10-03 19:13:08.0 +02:00
    }
  }
]

App\Twig\Components\VoteComponent {#3528
  +subject: App\Entity\Entry {#1917
    +user: Proxies\__CG__\App\Entity\User {#1946
      +avatar: null
      +cover: null
      +email: "maltfield@monero.town"
      +username: "@maltfield@monero.town"
      +roles: []
      +followersCount: 0
      +homepage: "front"
      +about: """
        I make and sell [BusKill laptop kill cords](https://buskill.in). Monero is accepted.\n
        \n
        [michaelaltfield.net](https://michaelaltfield.net)
        """
      +lastActive: DateTime @1727484173 {#3155
        date: 2024-09-28 02:42:53.0 +02:00
      }
      +markedForDeletionAt: null
      +fields: null
      +oauthGithubId: null
      +oauthGoogleId: null
      +oauthFacebookId: null
      +oauthKeycloakId: null
      +hideAdult: true
      +showSubscribedUsers: true
      +showSubscribedMagazines: true
      +showSubscribedDomains: true
      +preferredLanguages: []
      +featuredMagazines: null
      +showProfileSubscriptions: false
      +showProfileFollowings: true
      +markNewComments: false
      +notifyOnNewEntry: false
      +notifyOnNewEntryReply: true
      +notifyOnNewEntryCommentReply: true
      +notifyOnNewPost: false
      +notifyOnNewPostReply: true
      +notifyOnNewPostCommentReply: true
      +addMentionsEntries: false
      +addMentionsPosts: true
      +isBanned: false
      +isVerified: false
      +isDeleted: false
      +isBot: false
      +spamProtection: true
      +customCss: null
      +ignoreMagazinesCustomCss: false
      +moderatorTokens: Doctrine\ORM\PersistentCollection {#3160 …}
      +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#3163 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#3165 …}
      +entries: Doctrine\ORM\PersistentCollection {#3167 …}
      +entryVotes: Doctrine\ORM\PersistentCollection {#3169 …}
      +entryComments: Doctrine\ORM\PersistentCollection {#3171 …}
      +entryCommentVotes: Doctrine\ORM\PersistentCollection {#3185 …}
      +posts: Doctrine\ORM\PersistentCollection {#3176 …}
      +postVotes: Doctrine\ORM\PersistentCollection {#3199 …}
      +postComments: Doctrine\ORM\PersistentCollection {#3220 …}
      +postCommentVotes: Doctrine\ORM\PersistentCollection {#3251 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#3208 …}
      +subscribedDomains: Doctrine\ORM\PersistentCollection {#3260 …}
      +follows: Doctrine\ORM\PersistentCollection {#3263 …}
      +followers: Doctrine\ORM\PersistentCollection {#3258 …}
      +blocks: Doctrine\ORM\PersistentCollection {#3286 …}
      +blockers: Doctrine\ORM\PersistentCollection {#3282 …}
      +blockedMagazines: Doctrine\ORM\PersistentCollection {#3299 …}
      +blockedDomains: Doctrine\ORM\PersistentCollection {#3303 …}
      +reports: Doctrine\ORM\PersistentCollection {#3287 …}
      +favourites: Doctrine\ORM\PersistentCollection {#3309 …}
      +violations: Doctrine\ORM\PersistentCollection {#3316 …}
      +notifications: Doctrine\ORM\PersistentCollection {#3318 …}
      +awards: Doctrine\ORM\PersistentCollection {#3310 …}
      +subscribedCategories: Doctrine\ORM\PersistentCollection {#3327 …}
      +categories: Doctrine\ORM\PersistentCollection {#3340 …}
      -id: 53233
      -password: "$2y$13$ONerzxs5ikSMZPP7JZz93.L7bi7bpix5PvgJJmsqWoSIfRo3rR8JO"
      -totpSecret: null
      -totpBackupCodes: []
      -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#3351 …}
      +apId: "maltfield@monero.town"
      +apProfileId: "https://monero.town/u/maltfield"
      +apPublicUrl: "https://monero.town/u/maltfield"
      +apFollowersUrl: null
      +apInboxUrl: "https://monero.town/inbox"
      +apDomain: "monero.town"
      +apPreferredUsername: "maltfield"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: false
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1711292170 {#3152
        date: 2024-03-24 15:56:10.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1696724832 {#3154
        date: 2023-10-08 02:27:12.0 +02:00
      }
      +__isInitialized__: true
       …2
    }
    +magazine: App\Entity\Magazine {#316
      +icon: null
      +name: "privacyguides@lemmy.one"
      +title: "privacyguides"
      +description: """
        *In the digital age, protecting your personal information might seem like an impossible task. We’re here to help.*\n
        \n
        This is a community for sharing news about privacy, posting information about cool privacy tools and services, and getting advice about your privacy journey.\n
        \n
        ---\n
        \n
        You can subscribe to this community from any Kbin or Lemmy instance:\n
        \n
        - [Subscribe on Kbin.social](https://kbin.social/m/privacyguides@lemmy.one)\n
        - [Subscribe on Lemmy.one](https://lemmy.one/c/privacyguides)\n
        - [Subscribe on Lemmy.ml](https://lemmy.ml/c/privacyguides@lemmy.one)\n
        - [Subscribe on Beehaw.org](https://beehaw.org/c/privacyguides@lemmy.one)\n
        \n
        [Learn more…](https://lemmy.one/post/355)\n
        \n
        ---\n
        \n
        Check out our website at [privacyguides.org](https://www.privacyguides.org) before asking your questions here. We’ve tried answering the common questions and recommendations there!\n
        \n
        Want to get involved? The website is [open-source on GitHub](https://github.com/privacyguides/privacyguides.org), and your help would be appreciated!\n
        \n
        ---\n
        \n
        **This community is the “official” Privacy Guides community on Lemmy, which can be [verified here](https://www.reddit.com/r/PrivacyGuides/comments/13x7oe3/who_wants_to_try_out_lemmy_privacyguideslemmyone/). Other “Privacy Guides” communities on other Lemmy servers are not moderated by this team or associated with the website.**\n
        \n
        ---\n
        \n
        **Moderation Rules:**\n
        \n
        1. We prefer posting about open-source software whenever possible.\n
        2. This is not the place for self-promotion if you are not listed on privacyguides.org. If you want to be listed, [make a suggestion on our forum first](https://discuss.privacyguides.net/c/site-development/suggestions/6).\n
        3. No soliciting engagement: Don’t ask for upvotes, follows, etc.\n
        4. Surveys, Fundraising, and Petitions must be **pre**-approved by the mod team.\n
        5. Be civil, no violence, hate speech. Assume people here are posting in good faith.\n
        6. Don’t repost topics which have already been covered here.\n
        7. News posts must be related to privacy and security, and **your post title must match the article headline exactly.** Do not editorialize titles, you can post your opinions in the post body or a comment.\n
        8. Memes/images/video posts that could be summarized as text explanations should not be posted. Infographics and conference talks from reputable sources are acceptable.\n
        9. **No help vampires:** This is not a tech support subreddit, don’t abuse our community’s willingness to help. Questions related to privacy, security or privacy/security related software and their configurations are acceptable.\n
        10. No misinformation: Extraordinary claims must be matched with **evidence.**\n
        11. Do not post about VPNs or cryptocurrencies which are not listed on [privacyguides.org](https://www.privacyguides.org/en/tools/). See Rule 2 for info on adding new recommendations to the website.\n
        12. General guides or software lists are not permitted. Original sources and research about specific topics are allowed as long as they are high quality and factual. **We are not providing a platform for poorly-vetted, out-of-date or conflicting recommendations.**\n
        \n
        ---\n
        \n
        Additional Resources:\n
        \n
        - [EFF: Surveillance Self-Defense](https://ssd.eff.org/)\n
        - [Consumer Reports Security Planner](https://securityplanner.consumerreports.org/)\n
        - [Jonah Aragon](https://www.jonaharagon.com) ([YouTube](https://youtube.com/@jonaharagon))\n
        - [r/Privacy](https://www.reddit.com/r/Privacy)\n
        - [Big Ass Data Broker Opt-Out List](https://github.com/yaelwrites/Big-Ass-Data-Broker-Opt-Out-List)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 259
      +entryCommentCount: 2490
      +postCount: 5
      +postCommentCount: 29
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729537882 {#324
        date: 2024-10-21 21:11:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#304 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#300 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#289 …}
      +entries: Doctrine\ORM\PersistentCollection {#247 …}
      +posts: Doctrine\ORM\PersistentCollection {#205 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#267 …}
      +bans: Doctrine\ORM\PersistentCollection {#184 …}
      +reports: Doctrine\ORM\PersistentCollection {#170 …}
      +badges: Doctrine\ORM\PersistentCollection {#148 …}
      +logs: Doctrine\ORM\PersistentCollection {#138 …}
      +awards: Doctrine\ORM\PersistentCollection {#127 …}
      +categories: Doctrine\ORM\PersistentCollection {#114 …}
      -id: 39
      +apId: "privacyguides@lemmy.one"
      +apProfileId: "https://lemmy.one/c/privacyguides"
      +apPublicUrl: "https://lemmy.one/c/privacyguides"
      +apFollowersUrl: "https://lemmy.one/c/privacyguides/followers"
      +apInboxUrl: "https://lemmy.one/inbox"
      +apDomain: "lemmy.one"
      +apPreferredUsername: "privacyguides"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729576084 {#325
        date: 2024-10-22 07:48:04.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1696630878 {#319
        date: 2023-10-07 00:21:18.0 +02:00
      }
    }
    +image: Proxies\__CG__\App\Entity\Image {#2412 …}
    +domain: Proxies\__CG__\App\Entity\Domain {#1794 …}
    +slug: "QubesOS-Disarm-BusKill-Dead-Man-Switch-with-Keyboard-Shortcut-Guide"
    +title: "[QubesOS] Disarm BusKill Dead Man Switch with Keyboard Shortcut (Guide)"
    +url: "https://www.buskill.in/qubes-disarm/"
    +body: """
      This article describes how to setup keyboard shortcuts in QubesOS so that you can temporarily disarm (pause) the BusKill laptop kill cord.\n
      \n
      This allows the user to, for example, go to the bathroom without causing their computer to shutdown or self-destruct.\n
      \n
      [![Arm  Disarm BusKill in QubesOS](https://www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_featuredImage.jpg)](https://buskill.in/qubes-disarm)\n
      \n
      This is a guide that builds on part one: [A Laptop Kill Cord for QubesOS (1/2)](/qubes-os/). Before reading this, you should already be familiar with how to [setup udev rules for BusKill on QubesOS](https://www.buskill.in/qubes-os/).\n
      \n
      1. [A Laptop Kill Cord for QubesOS (1/2)](/qubes-os/)\n
      2. Disarm BusKill in QubesOS (2/2)\n
      \n
      > ⓘ Note: This post is adapted from its original [article on Tom Hocker's blog](https://humandecoded.io/qubes-os-yubikey-buskill/).\n
      \n
      What is BusKill?\n
      ================\n
      \n
      > What if someone literally steals your laptop while you're working with classified information inside a Whonix DispVM? They'd also be able to recover data from previous DispVMs--as Disposable VM's rootfs virtual files are *not* securely shredded after your DispVM is destroyed.\n
      \n
      Are you a security researcher, journalist, or intelligence operative that works in QubesOS--exploiting Qubes' [brilliant security-through-compartimentalization](https://freedom.press/news/the-operating-system-that-can-protect-you-even-if-you-get-hacked/)to keep your data safe? Do you make use of Whonix [Disposable VMs](https://www.qubes-os.org/doc/disposablevm/) for your work? Great! This post is for you.\n
      \n
      I'm sure your QubesOS laptop has Full Disk Encryption and you're using a strong passphrase. But what if someone literally steals your laptop while you're working with classified information inside a Whonix DispVM? Not only will they get access to all of your AppVM's private data and the currently-running Whonix DispVM's data, but there's a high chance they'd be able to recover data from [previous DispVMs](https://www.whonix.org/wiki/Qubes/DisposableVM#Warnings)--as **Disposable VM's rootfs virtual files ([volatile.img](https://groups.google.com/forum/#!topic/qubes-devel/QwL5PjqPs-4/discussion)) are [*not* securely shredded](https://github.com/QubesOS/qubes-issues/issues/904) after your DispVM is destroyed** by Qubes!\n
      \n
      Let's say you're a journalist, activist, whistleblower, or a human rights worker in an oppressive regime. Or an intelligence operative behind enemy lines doing research or preparing a top-secret document behind a locked door. What do you do to protect your data, sources, or assets when the secret police suddenly batter down your door? How quickly can you *actually* act to shutdown your laptop and shred your RAM and/or FDE encryption keys?\n
      \n
      | [![BusKill Demo](https://www.buskill.in/wp-content/uploads/sites/8/2020/02/busKillDemo.mp4)](https://www.buskill.in/#demo) |\n
      |---|\n
      | *Watch the [BusKill Explainer Video](https://www.buskill.in/#demo) for more info [youtube.com/v/qPwyoD_cQR4](https://www.youtube.com/v/qPwyoD_cQR4)* |\n
      \n
      BusKill utilizes a magnetic trip-wire that tethers your body to your laptop. If you suddenly jump to your feet or fall off your chair (in response to the battering ram crashing through your door) or your laptop is ripped off your table by a group of armed thugs, the data bus' magnetic connection will be severed. This event causes a configurable *trigger* to execute.\n
      \n
      The BusKill `trigger` can be anything from:\n
      \n
      1. locking your screen or\n
      2. shutting down the computer or\n
      3. initiating a [self-destruct](/luks-self-destruct/) sequence\n
      \n
      While our [last post](qubes-os) described how to setup such a system in QubesOS with BusKill, *this* post will describe how to add keyboard shortcuts to arm & disarm the dead man switch (eg so you can go to the bathroom).\n
      \n
      Disclaimer\n
      ==========\n
      \n
      This guide contains experimental files, commands, and software. The information contained in this article may or may not lead to corruption or total permanent deletion of some or all of your data. We've done our best to carefully guide the user so they know the risks of each BusKill trigger, but we cannot be responsible for any data loss that has occurred as a result of following this guide.\n
      \n
      The contents of this guide is provided openly and is licensed under the [CC-BY-SA](https://creativecommons.org/licenses/by-sa/4.0/) license. The software included in this guide is licensed under the [GNU GPLv3](https://www.gnu.org/licenses/gpl-3.0.html) license. All content here is consistent with the limitations of liabilities outlined in its respective licenses.\n
      \n
      We highly recommend that any experiments with the scripts included in this article are used exclusively on a disposable machine containing no valuable data.\n
      \n
      If data loss is a concern for you, then leave now and do not proceed with following this guide. You have been warned.\n
      \n
      Release Note\n
      ------------\n
      \n
      Also be aware that, due to the risks outlined above, BusKill will *not*be released with this "self-destruct" trigger.\n
      \n
      If you [purchase](/buy)a BusKill cable, it will only ship with non-destructive triggers that lock the screen or shutdown the computer. Advanced users can follow guides to add additional destructive triggers, such as the one described in this post, but they should do so at their own risk--taking carefully into consideration all of the warnings outlined above and throughout this article.\n
      \n
      **Again, if you [buy](/buy) a BusKill cable, the worst that can happen is your computer will abruptly shutdown.**\n
      \n
      Assumptions\n
      ===========\n
      \n
      This guide necessarily makes several assumptions outlined below.\n
      \n
      sys-usb\n
      -------\n
      \n
      In this guide, we assume that your QubesOS install has a [USB-Qube](https://www.qubes-os.org/doc/usb-qubes/) named '`sys-usb`' for handling [USB events](https://www.qubes-os.org/doc/usb-devices/) on behalf of `dom0`.\n
      \n
      If you decided to combine your USB and networking Qubes at [install time](https://www.qubes-os.org/doc/installation-guide/#initial-setup), then replace all references in this guide for '`sys-usb`' to '`sys-net`'.\n
      \n
      If you decided to run your '`sys-usb`' VM as a DispoableVM at [install time](https://github.com/QubesOS/qubes-issues/issues/6684#issuecomment-1435381919), then replace all references in this guide for '`sys-usb`' its Disposable TemplateVM (eg '`fedora-36-dvm`').\n
      \n
      …And if you chose not to isolate your USB devices, then [may god help you](https://blog.invisiblethings.org/2011/05/31/usb-security-challenges.html).\n
      \n
      Udev Device Matching\n
      --------------------\n
      \n
      BusKill in Linux uses [udev](https://en.wikipedia.org/wiki/Udev) to detect when the USB's cable is severed. The exact udev rule that you use in the files below will depend on the drive you choose to use in your BusKill cable.\n
      \n
      In this guide, we identify our BusKill-specific drive with the '`ENV{ID_MODEL}==“Micromax_A74”`' [udev property](https://wiki.archlinux.org/index.php/Udev#udev_rule_example). You should replace this property with one that matches your BusKill-specific drive.\n
      \n
      To determine how to query your USB drive for device-specific identifiers, see [Introducing BusKill: A Kill Cord for your Laptop](/buskill-laptop-kill-cord-dead-man-switch/#software). Note that the ``udevadm monitor --environment --udev`` command should be run in the '`sys-usb`' Qube.\n
      \n
      > ⓘ Note: If you'd prefer to buy a BusKill cable than make your own, you can buy one fully assembled [here](/buy).\n
      \n
      QubesOS Version\n
      ---------------\n
      \n
      This guide was written for QubesOS v4.1.\n
      \n
      ```\n
      \n
      <span style="color:#323232;">[user@dom0 ~]$ cat /etc/redhat-release Qubes release 4.1.2 (R4.1)\n
      </span><span style="color:#323232;">[user@dom0 ~]$\n
      </span>\n
      ```\n
      \n
      BusKill Files\n
      =============\n
      \n
      This section will describe what files should be created and where.\n
      \n
      Due to the design of QubesOS, it takes a bit of mental gymnastics to understand what we're doing and why. It's important to keep in mind that, in QubesOS\n
      \n
      1. The keyboard and UI are configured in '`dom0’`\n
      2. USB devices (like the BusKill device) are routed to the '`sys-usb`' VM\n
      3. dom0 has the privilege to execute scripts inside other VMs (eg '`sys-usb`')\n
      4. By design, VMs should *not* be able to send arbitrary commands to be executed in dom0\n
      5. .…but via the [qubes-rpc](https://www.qubes-os.org/doc/qrexec/#qubes-rpc-services), we *can* permit some VMs (eg '`sys-usb`') to execute a script in dom0 (though for security reasons, ideally such that no data/input is sent from the less-trusted VM to dom0 -- other than the name of the script)\n
      \n
      Due to the constraints listed above:\n
      \n
      1. We'll be configuring the disarm button as keyboard shortcut in dom0\n
      2. We'll be saving and executing the '`buskill-disarm.sh`' script in '`sys-usb`' (because these scripts manipulate our udev rules)\n
      3. The keyboard shortcut in dom0 will *actually* be executing the above script in '`sys-usb`'\n
      \n
      sys-usb\n
      -------\n
      \n
      If you followed our [previous guide to setting-up BusKill in QubesOS](/qubes-os/), then you should already have a file in '`sys-usb`' at '`/rw/config/buskill.rules`'. You may even have modified it to trigger a [LUKS Self-Destruct](/luks-self-destruct/) on removal of your BusKill device.\n
      \n
      Because you're *now* experimenting with a new setup, let's go ahead and wipe out that old file with a new one that *just* executes a soft-shutdown. You might need some days to get used to the new disarm procedure, and you probably don't want to suddenly loose all your data due to an accidental false-positive!\n
      \n
      Execute the following on your '`sys-usb`' Qube:\n
      \n
      ```\n
      \n
      <span style="color:#323232;">mv /rw/config/buskill.rules /rw/config/buskill.rules.bak.`date "+%Y%m%d_%H%M%S"`\n
      </span><span style="color:#323232;">cat &lt;&lt; EOF | sudo tee /rw/config/buskill.rules\n
      </span><span style="color:#323232;">################################################################################\n
      </span><span style="color:#323232;"># File:    sys-usb:/etc/udev/rules.d/buskill.rules -> /rw/config/buskill.rules\n
      </span><span style="color:#323232;"># Purpose: Add buskill rules. For more info, see: https://buskill.in/qubes-os/\n
      </span><span style="color:#323232;"># Authors: Michael Altfield \n
      </span><span style="color:#323232;"># Created: 2020-01-02\n
      </span><span style="color:#323232;"># License: GNU GPLv3\n
      </span><span style="color:#323232;">################################################################################\n
      </span><span style="color:#323232;">ACTION=="remove", SUBSYSTEM=="usb", ENV{ID_MODEL}=="Micromax_A74", RUN+="/usr/bin/qrexec-client-vm dom0 buskill.softShutdown"\n
      </span><span style="color:#323232;">EOF\n
      </span><span style="color:#323232;">sudo ln -s /rw/config/buskill.rules /etc/udev/rules.d/\n
      </span><span style="color:#323232;">sudo udevadm control --reload\n
      </span>\n
      ```\n
      \n
      Now, let's add a new udev '`.rules`' file. This one will always *just* lock your screen, and it's what will be put in-place when BusKill is "disarmed".\n
      \n
      Execute the following on your '`sys-usb`' Qube:\n
      \n
      ```\n
      \n
      <span style="color:#323232;">cat &lt;&lt; EOF | sudo tee /rw/config/buskill.lock.rules\n
      </span><span style="color:#323232;">################################################################################\n
      </span><span style="color:#323232;"># File:    sys-usb:/etc/udev/rules.d/buskill.rules -> /rw/config/buskill.lock.rules\n
      </span><span style="color:#323232;"># Purpose: Just lock the screen. For more info, see: https://buskill.in/qubes-os/\n
      </span><span style="color:#323232;"># Authors: Michael Altfield \n
      </span><span style="color:#323232;"># Created: 2023-05-10\n
      </span><span style="color:#323232;"># License: GNU GPLv3\n
      </span><span style="color:#323232;">################################################################################\n
      </span><span style="color:#323232;">ACTION=="remove", SUBSYSTEM=="usb", ENV{ID_MODEL}=="Micromax_A74", RUN+="/usr/bin/qrexec-client-vm dom0 buskill.lock"\n
      </span><span style="color:#323232;">EOF\n
      </span>\n
      ```\n
      \n
      The careful reader will see that we're not *actually* disarming BusKill in the same sense as our [BusKill GUI app](https://github.com/buskill/buskill-app/). Indeed, what we're *actually* going to do is swap these two files for 30 seconds.\n
      \n
      This way, if BusKill is armed and you remove the cable, your computer shuts-down.\n
      \n
      But if you want to disarm, the procedure becomes:\n
      \n
      1. Hit the "Disarm BusKill" keyboard shortcut (see below)\n
      2. Wait for the toast popup message indicating that BusKill is now disarmed\n
      3. Remove the cable within 30 seconds\n
      4. Your screen locks (instead of shutting down)\n
      \n
      Personally, I can't think of a QubesOS user that would want to leave their machine unlocked when they go to the bathroom, so I figured this approach would work better than an *actual* disarm.\n
      \n
      Bonus: when you return from your break, just plug-in the BusKill cable in, and it'll already be armed (reducing the risk of user error due to forgetting to arm BusKill).\n
      \n
      Now, let's add the actual '`buskill-disarm.sh`' script to disarm BusKill:\n
      \n
      Execute the following on your '`sys-usb`' Qube:\n
      \n
      ```\n
      \n
      <span style="color:#323232;">cat &lt;&lt; EOF | sudo tee /usr/local/bin/buskill-disarm.sh\n
      </span><span style="color:#323232;">#!/bin/bash\n
      </span><span style="color:#323232;"> \n
      </span><span style="color:#323232;">################################################################################\n
      </span><span style="color:#323232;"># File:    sys-usb:/usr/local/bin/buskill-disarm.sh\n
      </span><span style="color:#323232;"># Purpose: Temp disarm BusKill. For more info, see: https://buskill.in/qubes-os/\n
      </span><span style="color:#323232;"># Authors: Tom \n
      </span><span style="color:#323232;"># Co-Auth: Michael Altfield \n
      </span><span style="color:#323232;"># Created: 2023-05-10\n
      </span><span style="color:#323232;"># License: GNU GPLv3\n
      </span><span style="color:#323232;">################################################################################\n
      </span><span style="color:#323232;"> \n
      </span><span style="color:#323232;"># replace the 'shutdown' trigger with the 'lock' trigger\n
      </span><span style="color:#323232;">sudo rm /etc/udev/rules.d/buskill.rules\n
      </span><span style="color:#323232;">sudo ln -s /rw/config/buskill.lock.rules /etc/udev/rules.d/buskill.rules\n
      </span><span style="color:#323232;">sudo udevadm control --reload\n
      </span><span style="color:#323232;"> \n
      </span><span style="color:#323232;"># let the user know that BusKill is now temporarily disarmed\n
      </span><span style="color:#323232;">notify-send -t 21000 "BusKill" "Disarmed for 30 seconds" -i changes-allow\n
      </span><span style="color:#323232;"> \n
      </span><span style="color:#323232;"># wait 30 seconds\n
      </span><span style="color:#323232;">sleep 30\n
      </span><span style="color:#323232;"> \n
      </span><span style="color:#323232;"># replace the 'lock' trigger with the 'shutdown' trigger\n
      </span><span style="color:#323232;">sudo rm /etc/udev/rules.d/buskill.rules\n
      </span><span style="color:#323232;">sudo ln -s /rw/config/buskill.rules /etc/udev/rules.d/buskill.rules\n
      </span><span style="color:#323232;">sudo udevadm control --reload\n
      </span><span style="color:#323232;">notify-send -t 5000 "BusKill" "BusKill is Armed" -i changes-prevent\n
      </span><span style="color:#323232;">EOF\n
      </span><span style="color:#323232;">sudo chmod +x /usr/local/bin/buskill-disarm.sh\n
      </span>\n
      ```\n
      \n
      dom0\n
      ----\n
      \n
      If you followed our [previous guide to setting-up BusKill in QubesOS](/qubes-os/), then you shouldn't need to add any files to dom0. What you *do* need to do is setup some keyboard shortcuts.\n
      \n
      In the QubesOS GUI, click on the big `Q` "Start Menu" in the top-left of your XFCE panel to open the Applications menu. Navigate to '`System Tools`' and click Keyboard\n
      \n
      | [![Screenshot of QubesOS with an arrow pointing to the “Q” Application Menu in the very top-left of the screen](https://www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_menu1.png)](https://buskill.in/qubes-disarm) | [![Screenshot of QubesOS Application Menu with “System Tools -> Keyboard” highlighted](https://www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_menu2.png)](https://www.buskill.in/qubes-disarm/) |\n
      |---|---|\n
      | Click the “Q” to open the QubesOS Application Menu | Click System Tools -&gt; Keyboard |\n
      \n
      Click the '`Application Shortcuts`' Tab and then click the '`+ Add`' button on the bottom-left of the window.\n
      \n
      | [![Screenshot of QubesOS Keyboard Settings Window that shows the “Application Shortcuts” tab highlighted’alt](https://www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings1.png)](https://www.buskill.in/qubes-disarm/) | [![Screenshot of QubesOS Keyboard Settings Window that shows the “+ Add” button highlightedalt](https://www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-add1.jpg.png)](https://www.buskill.in/qubes-disarm/) |\n
      |---|---|\n
      | Click the “Application Shortcuts” tab to add a Keyboard Shortcut in Qubes | Click the “Add” Button to add a new Keyboard Shortcut in Qubes |\n
      \n
      In the '`Command`' input field, type the following\n
      \n
      ```\n
      \n
      <span style="color:#323232;">qvm-run sys-usb buskill-disarm.sh\n
      </span>\n
      ```\n
      \n
      The above command will execute a command in '`dom0`' that will execute a command in '`sys-usb`' that will execute the '`buskill-disarm.sh`' script that we created above.\n
      \n
      | [![Screenshot of QubesOS Keyboard Settings Window that shows the OK button highlighted](https://www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-add2.png)](https://www.buskill.in/qubes-disarm/) |\n
      |---|\n
      | After typing the command to be executed when the keyboard shortcut is pressed, click the "OK" button |\n
      \n
      Now click "OK" and, when prompted, type Ctrl+Shift+D (or whatever keyboard shortcut you want to bind to "Disarming BusKill").\n
      \n
      | [![Screenshot of QubesOS Keyboard Settings Window that shows the prompt "Press now the keyboard keys you want to use to trigger the command…"alt](https://www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-add3.png)](https://www.buskill.in/qubes-disarm/) | [![Screenshot of QubesOS Keyboard Settings Window that shows the selected Shortcut "Shift+Ctrl+D"](https://www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-add4.png)](https://www.buskill.in/qubes-disarm/) |\n
      |---|---|\n
      | Type “Ctrl+Shift+D” or whatever keyboard shortcut you want to trigger BusKill to be disarmed for 30 seconds |  |\n
      \n
      You should now have a keyboard shortcut binding for disarming BusKill!\n
      \n
      [![Screenshot of QubesOS\n
      Keyboard Settings Window that shows the newly created keyboard shortcut\n
      for Shift+Ctrl+D at the top of the\n
      list](https://www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-added1.png)](https://www.buskill.in/qubes-disarm/)\n
      \n
      Test It!\n
      ========\n
      \n
      At this point, you can test your new (temporary) BusKill Disarm functionality by:\n
      \n
      1. Plugging-in your BusKill cable\n
      2. Typing Ctrl+Shift+D\n
      3. Waiting for the toast popup message to appear indicating that BusKill is disarmed for 30 seconds\n
      4. Unplugging your BusKill cable\n
      \n
      Your machine should lock, not shutdown.\n
      \n
      | [![Screenshot of QubesOS with a toast message in the top-right that says BusKill Disarmed for 30 Seconds](https://www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_buskill-disarmed1.png)](https://www.buskill.in/qubes-disarm/) |\n
      |---|\n
      | After hitting the keyboard shortcut to disarm BusKill, you have 30 seconds to remove the cable |\n
      \n
      After 30 seconds, return to your computer and test the normal "arm" functionality:\n
      \n
      1. Plug-in your BusKill cable\n
      2. Unlock your screen\n
      3. Unplug your BusKill cable\n
      \n
      Your computer should shutdown, not lock.\n
      \n
      | [![Screenshot of QubesOS with a toast message in the top-right that says BusKill is Armed](https://www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_buskill-armed1.png)](https://www.buskill.in/qubes-disarm/) |\n
      |---|\n
      | 30 seconds after hitting the keyboard shortcut, BusKill will arm itself |\n
      \n
      Troubleshooting\n
      ===============\n
      \n
      Is unplugging your USB device doing nothing? Having other issues?\n
      \n
      See the [Troubleshooting section](https://buskill.in/qubes-os/#troubleshooting) in our original guide to using BusKill on QubesOS.\n
      \n
      Limitations/Improvements\n
      ========================\n
      \n
      Security is porous. All software has bugs. Nothing is 100% secure. For more limitations to using BusKill on QubesOS, see the [Limitations section](https://busill.in/qubes-os/#limitations) in our original guide to using BusKill on QubesOS.\n
      \n
      Buy a BusKill Cable\n
      ===================\n
      \n
      We look forward to continuing to improve the BusKill software and making BusKill more accessible this year. If you want to help, [please consider purchasing a BusKill cable](https://buskill.in/buy) for yourself or a loved one. It helps us fund further development, and you get your own BusKill cable to keep you or your loved ones safe.\n
      \n
      You can also buy a BusKill cable with bitcoin, monero, and other altcoins from our [BusKill Store’s .onion site](http://buskillvampfih2iucxhit3qp36i2zzql3u6pmkeafvlxs3tlmot5yad.onion/buy/).\n
      \n
      Stay safe,  \n
      The BusKill Team  \n
      [www.buskill.in](https://www.buskill.in/)  \n
      [buskillvampfih2iucxhit3qp36i2zzql3u6pmkeafvlxs3tl…](http://www.buskillvampfih2iucxhit3qp36i2zzql3u6pmkeafvlxs3tlmot5yad.onion)
      """
    +type: "link"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 0
    +favouriteCount: 4
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1696353188 {#1870
      date: 2023-10-03 19:13:08.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1843 …}
    +votes: Doctrine\ORM\PersistentCollection {#1879 …}
    +reports: Doctrine\ORM\PersistentCollection {#1885 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1395 …}
    +notifications: Doctrine\ORM\PersistentCollection {#1890 …}
    +badges: Doctrine\ORM\PersistentCollection {#1935 …}
    +children: []
    -id: 3502
    -titleTs: "'buskil':3 'dead':4 'disarm':2 'guid':10 'keyboard':8 'man':5 'qubeso':1 'shortcut':9 'switch':6"
    -bodyTs: "'-01':1485 '-02':1486 '-05':1581,1821 '-10':1582,1822 '-36':936 '/#demo)':408 '/)':2618 '/2011/05/31/usb-security-challenges.html).':955 '/bin/bash':1795 '/buskill-laptop-kill-cord-dead-man-switch':1058 '/buskill/buskill-app/).':1623 '/buy':745,811,1099 '/buy)':2559 '/buy/).':2609 '/doc/disposablevm/)':208 '/doc/installation-guide/#initial-setup),':885 '/doc/qrexec/#qubes-rpc-services),':1228 '/doc/usb-devices/)':865 '/doc/usb-qubes/)':854 '/etc/redhat-release':1112 '/etc/udev/rules.d':1508 '/etc/udev/rules.d/buskill.rules':1467,1562,1836,1841,1885,1890 '/forum/#!topic/qubes-devel/qwl5pjqps-4/discussion))':305 '/index.php/udev#udev_rule_example).':1021 '/licenses/by-sa/4.0/)':639 '/licenses/gpl-3.0.html)':655 '/luks-self-destruct':505,1370 '/news/the-operating-system-that-can-protect-you-even-if-you-get-hacked/)to':193 '/qubes-os':68,98,1343,1927 '/qubes-os-yubikey-buskill/).':122 '/qubes-os/':1479,1575,1811 '/qubes-os/#limitations)':2515 '/qubes-os/#troubleshooting)':2479 '/qubes-os/).':89 '/qubesos/qubes-issues/issues/6684#issuecomment-1435381919),':919 '/qubesos/qubes-issues/issues/904)':312 '/rw/config/buskill.lock.rules':1557,1563,1840 '/rw/config/buskill.rules':1356,1449,1462,1468,1507,1889 '/rw/config/buskill.rules.bak':1450 '/usr/bin/qrexec-client-vm':1500,1596 '/usr/local/bin/buskill-disarm.sh':1794,1800,1912 '/v/qpwyod_cqr4](https://www.youtube.com/v/qpwyod_cqr4)*':414 '/wiki/qubes/disposablevm#warnings)--as':295 '/wiki/udev)':966 '/wp-content/uploads/sites/8/2020/02/buskilldemo.mp4)](https://www.buskill.in/#demo)':400 '/wp-content/uploads/sites/8/qubes-disarm_buskill-armed1.png)](https://www.buskill.in/qubes-disarm/)':2450 '/wp-content/uploads/sites/8/qubes-disarm_buskill-disarmed1.png)](https://www.buskill.in/qubes-disarm/)':2379 '/wp-content/uploads/sites/8/qubes-disarm_featuredimage.jpg)](https://buskill.in/qubes-disarm)':51 '/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-add1.jpg.png)](https://www.buskill.in/qubes-disarm/)':2082 '/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-add2.png)](https://www.buskill.in/qubes-disarm/)':2164 '/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-add3.png)](https://www.buskill.in/qubes-disarm/)':2229 '/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-add4.png)](https://www.buskill.in/qubes-disarm/)':2246 '/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-added1.png)](https://www.buskill.in/qubes-disarm/)':2302 '/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings1.png)](https://www.buskill.in/qubes-disarm/)':2067 '/wp-content/uploads/sites/8/qubes-disarm_menu1.png)](https://buskill.in/qubes-disarm)':2005 '/wp-content/uploads/sites/8/qubes-disarm_menu2.png)](https://www.buskill.in/qubes-disarm/)':2018 '1':90,488,1163,1276,1665,2318,2409 '1/2':67,97 '100':2499 '2':99,493,1172,1289,1674,2325,2416 '2/2':104 '2020':1484 '2023':1580,1820 '21000':1860 '3':499,1187,1310,1687,2330,2420 '30':1638,1692,1864,1871,1874,2264,2345,2375,2390,2397,2451 '4':1202,1694,2347 '4.1.2':1115 '5':1219 '5000':1899 'a74':1016,1498,1594 'abl':148,286,1209 'abrupt':824 'access':259,2543 'accident':1435 'act':383 'action':1490,1586 'activist':327 'actual':382,1317,1609,1628,1735,1775 'adapt':110 'add':531,772,1470,1516,1773,1934,2041,2077,2089,2097,2100 'addit':773 'advanc':766 'ahead':1389 'allow':24,1869 'alreadi':74,1347,1755 'also':146,721,2589 'alt':2064,2226 'altcoin':2599 'altfield':1482,1578,1818 'alway':1525 'and/or':392 'anyth':486 'app':1620 'appear':2338 'applic':1973,1992,2009,2026,2034,2060,2085 'approach':1729 'appvm':264 'arbitrari':1212 'arm':44,463,535,1645,1757,1768,1903,2407,2447,2460 'arrow':1987 'articl':2,114,563,684,806 'assembl':1097 'asset':368 'assum':842 'assumpt':826,832 'auth':1816 'author':1480,1576,1812 'awar':723 'bathroom':33,548,1724 'batter':374,445 'becom':1664 'behalf':867 'behind':342,354 'best':586 'better':1732 'big':1957 'bind':2199,2273 'bit':1141 'bitcoin':2595 'blog':119 'blog.invisiblethings.org':954 'blog.invisiblethings.org/2011/05/31/usb-security-challenges.html).':953 'bodi':425 'bonus':1737 'bottom':2046 'bottom-left':2045 'break':1743 'brilliant':186 'bug':2496 'build':57 'bus':467 'busill.in':2514 'busill.in/qubes-os/#limitations)':2513 'buskil':19,46,84,101,125,396,403,415,482,524,599,731,747,813,959,998,1007,1033,1051,1086,1119,1177,1340,1375,1471,1541,1611,1618,1643,1669,1683,1749,1769,1780,1804,1851,1861,1900,1901,1924,2202,2259,2276,2314,2323,2341,2350,2372,2387,2414,2423,2445,2458,2486,2506,2522,2527,2537,2541,2555,2577,2592,2602,2613 'buskill-disarm.sh':1297,1776,2121,2144 'buskill-specif':1006,1032 'buskill.in':1478,1574,1810,2478,2558 'buskill.in/buy)':2557 'buskill.in/qubes-os/':1477,1573,1809 'buskill.in/qubes-os/#troubleshooting)':2477 'buskill.lock':1598 'buskill.softshutdown':1502 'buskillvampfih2iucxhit3qp36i2zzql3u6pmkeafvlxs3tl':2619 'buskillvampfih2iucxhit3qp36i2zzql3u6pmkeafvlxs3tlmot5yad.onion':2608 'buskillvampfih2iucxhit3qp36i2zzql3u6pmkeafvlxs3tlmot5yad.onion/buy/).':2607 'button':1283,2042,2078,2098,2160,2181 'buy':810,1084,1094,2525,2590 'cabl':748,814,973,999,1087,1650,1690,1750,2324,2351,2395,2415,2424,2528,2556,2578,2593 'cannot':603 'care':588,794,1601 'cat':1111,1458,1553,1790 'caus':35,475 'cc':634 'cc-by-sa':633 'chair':440 'chanc':282 'chang':1868,1906 'changes-allow':1867 'changes-prev':1905 'chmod':1910 'choos':993 'chose':941 'classifi':138,248 'click':1954,1980,2019,2028,2032,2039,2083,2095,2178,2183 'co':1815 'co-auth':1814 'combin':874 'command':555,1067,1213,2109,2124,2128,2135,2168,2225 'compartiment':190 'comput':37,497,765,822,1652,2402,2426 'concern':701 'configur':477,1169,1280 'connect':469 'consid':2552 'consider':796 'consist':661 'constraint':1273 'contain':552,560,692 'content':621,658 'continu':2533 'control':1511,1844,1893 'cord':22,64,94,1054 'corrupt':570 'crash':447 'creat':1129,1483,1579,1819,2148,2287 'creativecommons.org':638 'creativecommons.org/licenses/by-sa/4.0/)':637 'ctrl':2189,2242,2248,2292,2327 'current':271 'currently-run':270 'd':145,284,1081,1454,2191,2243,2250,2293,2329 'data':151,196,267,276,289,365,466,581,608,695,697,1431 'data/input':1252 'date':1451 'day':1411 'dead':538 'decid':872,903 'delet':574 'demo':397 'depend':988 'describ':3,514,528,780,1124 'design':1135,1204 'destroy':170,317 'destruct':43,504,740,756,774,1369 'detect':968 'determin':1037 'develop':2571 'devic':947,957,1046,1174,1178,1376,2467 'device-specif':1045 'disarm':16,45,100,536,1282,1418,1543,1610,1661,1668,1686,1736,1779,1803,1855,1862,2201,2262,2275,2315,2343,2373,2386 'disclaim':549 'disk':226 'dispoablevm':913 'dispos':156,204,296,690,932 'dispvm':143,154,168,253,274,292,315 'document':353 'dom0':869,1110,1118,1171,1188,1218,1243,1262,1288,1315,1501,1597,1913,1938,2130 'done':584 'door':357,377,450 'drive':991,1009,1035,1043 'due':725,1132,1270,1432,1764 'dvm':937 'eg':541,934,1198,1234 'en.wikipedia.org':965 'en.wikipedia.org/wiki/udev)':964 'encrypt':227,394 'enemi':343 'env':1012,1494,1590 'environ':1065 'eof':1459,1503,1554,1599,1791,1908 'error':1763 'even':1359 'event':474,862 'exact':977 'exampl':29 'exclus':687 'execut':480,1193,1216,1239,1295,1319,1402,1439,1544,1781,2126,2133,2142,2171 'experi':677,1381 'experiment':553 'explain':404 'exploit':184 'fall':437 'fals':1437 'false-posit':1436 'familiar':76 'fde':393 'fedora':935 'feet':435 'field':2111 'figur':1727 'file':161,301,554,985,1120,1126,1350,1395,1463,1521,1558,1636,1796,1936 'follow':617,712,769,1332,1441,1546,1783,1916,2114 'forget':1766 'forward':2531 'freedom.press':192 'freedom.press/news/the-operating-system-that-can-protect-you-even-if-you-get-hacked/)to':191 'full':225 'fulli':1096 'function':2316,2408 'fund':2569 'get':258,1413,2574 'github.com':311,918,1622 'github.com/buskill/buskill-app/).':1621 'github.com/qubesos/qubes-issues/issues/6684#issuecomment-1435381919),':917 'github.com/qubesos/qubes-issues/issues/904)':310 'gnu':651,1488,1584,1824 'go':30,545,1388,1629,1721 'god':950 'gplv3':652,1489,1585,1825 'great':212 'group':461 'groups.google.com':304 'groups.google.com/forum/#!topic/qubes-devel/qwl5pjqps-4/discussion))':303 'gui':1619,1953 'guid':55,551,589,619,624,646,714,770,828,840,892,926,1002,1103,1335,1919,2483,2519 'gymnast':1144 'h':1455 'handl':860 'happen':819 'help':951,2550,2567 'high':281,673 'highlight':2015,2063,2161 'highlightedalt':2079 'hit':1666,2381,2454 'hocker':117 'human':331 'humandecoded.io':121 'humandecoded.io/qubes-os-yubikey-buskill/).':120 'id':1013,1495,1591 'ideal':1248 'identifi':1004,1048 'import':1155 'improv':2535 'in-plac':1537 'includ':643,681 'inde':1624 'indic':1681,2339 'info':411,1475,1571,1807 'inform':139,249,559 'initi':500 'input':2110 'insid':140,250,1195 'instal':846,881,915 'instead':1698 'intellig':178,340 'introduc':1050 'isol':944 'issu':2472 'journalist':176,326 'jump':432 'keep':194,1157,2580 'key':395,2217 'keyboard':7,532,1165,1285,1312,1670,1948,1981,2014,2031,2054,2071,2091,2103,2153,2174,2194,2206,2216,2233,2253,2271,2280,2288,2383,2456 'kill':21,63,93,1053 'know':594,1849 'laptop':20,62,92,132,223,242,387,428,453,1057 'last':509 'lead':568 'leav':705,1715 'left':1965,1999,2047 'less':1258 'less-trust':1257 'let':320,1386,1514,1771,1846 'liabil':666 'licens':630,640,648,656,671,1487,1583,1823 'like':1175 'limit':664,2503,2511 'limitations/improvements':2489 'line':344 'linux':961 'list':1274,2299 'liter':129,239 'll':1278,1291,1754 'ln':1505,1838,1887 'lock':356,489,759,1527,1566,1697,1832,1877,2355,2430 'look':2530 'loos':1428 'loss':609,698 'love':2564,2584 'luk':1366 'm':219,1453,1456 'machin':691,1717,2353 'magnet':418,468 'make':200,830,1089,2540 'man':539 'manipul':1306 'match':958,1030 'may':564,566,949,1358 'mental':1143 'menu':1960,1974,1993,2010,2027 'messag':1680,2336,2364,2437 'michael':1481,1577,1817 'micromax':1015,1497,1593 'might':1408 'mind':1159 'model':1014,1496,1592 'modifi':1361 'monero':2596 'monitor':1064 'mv':1448 'name':855,1266 'navig':1975 'necessarili':829 'need':1409,1932,1942 'net':900 'network':878 'new':1384,1398,1417,1518,2102,2312 'newli':2286 'non':755 'non-destruct':754 'normal':2406 'note':106,720,1060,1078 'noth':2469,2497 'notifi':1857,1896 'notify-send':1856,1895 'occur':612 'ok':2159,2180,2184 'old':1394 'one':60,779,1028,1095,1399,1523,2565,2585 'onion':2605 'open':627,1971,2023 'oper':179,341 'oppress':336 'origin':113,2482,2518 'os':513 'outlin':667,729,801,833 'panel':1969 'part':59 'passphras':234 'paus':17 'perman':573 'permit':1231 'person':1702 'place':1539 'pleas':2551 'plug':1746,2320,2411 'plug-in':1745,2410 'plugging-in':2319 'point':1988,2307 'polic':372 'popup':1679,2335 'porous':2492 'posit':1438 'post':108,214,510,526,783 'prefer':1082 'prepar':348 'press':2177,2213 'prevent':1907 'previous':153,291,1334,1918 'privat':266 'privileg':1191 'probabl':1422 'procedur':1419,1663 'proceed':710 'prompt':2187,2212 'properti':1018,1026 'protect':363 'provid':626 'purchas':744,2553 'purpos':1469,1564,1801 'put':1536 'q':1958,1991,2021 'qube':185,319,512,851,879,1076,1113,1224,1447,1552,1789,2094,2106 'qubes-o':511 'qubes-rpc':1223 'qubeso':10,48,66,86,96,103,183,222,522,845,1100,1107,1137,1162,1342,1709,1926,1952,1984,2008,2025,2053,2070,2152,2205,2232,2279,2360,2433,2488,2508,2524 'queri':1040 'quick':379 'qvm':2116 'qvm-run':2115 'r4.1':1116 'ram':391,446 're':135,230,245,324,1149,1379,1607,1627 'read':70 'reader':1602 'reason':1247 'recommend':674 'recov':150,288 'reduc':1758 'refer':889,923 'regim':337 'releas':719,735,1114 'reload':1512,1845,1894 'remov':1372,1491,1587,1648,1688,2393 'replac':887,921,1024,1826,1875 'research':175,346 'respect':670 'respons':442,605 'result':615 'return':1740,2399 'right':332,2369,2442 'rip':455 'risk':596,728,792,1760 'rm':1835,1884 'rootf':159,299 'rout':1180 'rpc':1225 'rule':82,979,1309,1472,1520 'run':272,905,1070,1499,1595,2117 'sa':636 'safe':197,2586,2611 'save':1293 'say':322,2371,2444 'screen':491,761,1529,1568,1696,2002,2419 'screenshot':1982,2006,2051,2068,2150,2203,2230,2277,2358,2431 'script':680,1194,1241,1269,1298,1305,1322,1777,2145 'second':1639,1693,1865,1872,2265,2346,2376,2391,2398,2452 'secret':352,371 'section':1122,2476,2512 'secur':164,174,188,308,1246,2490,2500 'security-through-compartiment':187 'see':1049,1476,1572,1604,1672,1808,2473,2509 'select':2239 'self':42,503,739,1368 'self-destruct':41,502,738,1367 'send':1211,1858,1897 'sens':1615 'sent':1254 'sequenc':506 'set':1338,1922,2055,2072,2154,2207,2234,2281 'setting-up':1337,1921 'setup':6,80,517,1385,1946 'sever':472,831,975 'shift':2190,2241,2249,2291,2328 'ship':752 'shortcut':8,533,1286,1313,1671,1949,2035,2061,2086,2092,2104,2175,2195,2240,2254,2272,2289,2384,2457 'shouldn':1930 'show':2058,2075,2157,2210,2237,2284 'shred':165,309,389 'shut':494,1654,1700 'shutdown':39,385,763,825,1406,1828,1881,2357,2428 'shuts-down':1653 'site':2606 'sleep':1873 'soft':1405 'soft-shutdown':1404 'softwar':557,642,1059,2494,2538 'someon':128,238 'sourc':366 'specif':1008,1034,1047 'start':1959 'stay':2610 'steal':130,240 'store':2603 'strong':233 'subsystem':1492,1588 'sudden':373,431,1427 'sudo':1460,1504,1509,1555,1792,1834,1837,1842,1883,1886,1891,1909 'sure':220 'swap':1633 'switch':540 'sys':836,857,895,899,908,929,1074,1184,1200,1236,1301,1325,1328,1353,1445,1465,1550,1560,1787,1798,2119,2138 'sys-net':898 'sys-usb':835,856,894,907,928,1073,1183,1199,1235,1300,1324,1327,1352,1444,1464,1549,1559,1786,1797,2118,2137 'system':520,1977,2012,2029 'tab':2036,2062,2087 'tabl':458 'take':793,1139 'team':2614 'tee':1461,1556,1793 'temp':1802 'templatevm':933 'temporari':2313 'temporarili':15,1854 'test':2303,2310,2404 'tether':423 'think':1706 'though':1244 'throughout':804 'thug':464 'time':882,916 'toast':1678,2334,2363,2436 'tom':116,1813 'tool':1978,2013,2030 'top':351,1964,1998,2296,2368,2441 'top-left':1963,1997 'top-right':2367,2440 'top-secret':350 'total':572 'trigger':478,483,600,741,757,775,1364,1829,1833,1878,1882,2223,2258 'trip':420 'trip-wir':419 'troubleshoot':2462,2475 'trust':1259 'two':1635 'type':2112,2166,2188,2247,2326 'udev':81,956,963,978,1017,1066,1308,1519 'udevadm':1063,1510,1843,1892 'ui':1167 'understand':1146 'unlock':1718,2417 'unplug':2348,2421,2464 'us':2568 'usb':837,850,858,861,876,896,909,930,946,971,1042,1075,1173,1185,1201,1237,1302,1326,1329,1354,1446,1466,1493,1551,1561,1589,1788,1799,2120,2139,2466 'usb-qub':849 'use':201,231,686,962,982,995,1414,2221,2485,2505,2521 'user':26,591,767,1109,1117,1710,1762,1848 'util':416 'v4.1':1108 'valuabl':694 've':583 'version':1101 'via':1221 'video':405 'virtual':160,300 'vm':157,297,910,1186,1260 'vms':205,1197,1205,1233 'volatile.img':302 'wait':1675,1870,2331 'want':1425,1659,1713,2197,2219,2256,2548 'warn':718,800 'watch':401 'way':1641 'whatev':2193,2252 'whistleblow':328 'whonix':142,203,252,273 'wiki.archlinux.org':1020 'wiki.archlinux.org/index.php/udev#udev_rule_example).':1019 'window':2050,2056,2073,2155,2208,2235,2282 'wipe':1391 'wire':421 'within':1691 'without':34 'work':136,181,211,246,1731 'worker':333 'worst':816 'would':1712,1730 'written':1105 'www.buskill.in':50,88,399,407,2004,2017,2066,2081,2163,2228,2245,2301,2378,2449,2615,2617 'www.buskill.in/#demo)':406 'www.buskill.in/)':2616 'www.buskill.in/qubes-os/).':87 'www.buskill.in/wp-content/uploads/sites/8/2020/02/buskilldemo.mp4)](https://www.buskill.in/#demo)':398 'www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_buskill-armed1.png)](https://www.buskill.in/qubes-disarm/)':2448 'www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_buskill-disarmed1.png)](https://www.buskill.in/qubes-disarm/)':2377 'www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_featuredimage.jpg)](https://buskill.in/qubes-disarm)':49 'www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-add1.jpg.png)](https://www.buskill.in/qubes-disarm/)':2080 'www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-add2.png)](https://www.buskill.in/qubes-disarm/)':2162 'www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-add3.png)](https://www.buskill.in/qubes-disarm/)':2227 'www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-add4.png)](https://www.buskill.in/qubes-disarm/)':2244 'www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-added1.png)](https://www.buskill.in/qubes-disarm/)':2300 'www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings1.png)](https://www.buskill.in/qubes-disarm/)':2065 'www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_menu1.png)](https://buskill.in/qubes-disarm)':2003 'www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_menu2.png)](https://www.buskill.in/qubes-disarm/)':2016 'www.buskillvampfih2iucxhit3qp36i2zzql3u6pmkeafvlxs3tlmot5yad.onion':2620 'www.gnu.org':654 'www.gnu.org/licenses/gpl-3.0.html)':653 'www.qubes-os.org':207,853,864,884,1227 'www.qubes-os.org/doc/disposablevm/)':206 'www.qubes-os.org/doc/installation-guide/#initial-setup),':883 'www.qubes-os.org/doc/qrexec/#qubes-rpc-services),':1226 'www.qubes-os.org/doc/usb-devices/)':863 'www.qubes-os.org/doc/usb-qubes/)':852 'www.whonix.org':294 'www.whonix.org/wiki/qubes/disposablevm#warnings)--as':293 'x':1911 'xfce':1968 'y':1452 'year':2545 'youtube.com':413 'youtube.com/v/qpwyod_cqr4](https://www.youtube.com/v/qpwyod_cqr4)*':412 'ⓘ':105,1077"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1696362188
    +visibility: "visible             "
    +apId: "https://monero.town/post/703020"
    +editedAt: null
    +createdAt: DateTimeImmutable @1696353188 {#118
      date: 2023-10-03 19:13:08.0 +02:00
    }
  }
  +formDest: "entry"
  +showDownvote: true
  -cache: Symfony\Component\Cache\Adapter\TraceableTagAwareAdapter {#600 …}
}

[
  "subject" => App\Entity\Entry {#1917
    +user: Proxies\__CG__\App\Entity\User {#1946
      +avatar: null
      +cover: null
      +email: "maltfield@monero.town"
      +username: "@maltfield@monero.town"
      +roles: []
      +followersCount: 0
      +homepage: "front"
      +about: """
        I make and sell [BusKill laptop kill cords](https://buskill.in). Monero is accepted.\n
        \n
        [michaelaltfield.net](https://michaelaltfield.net)
        """
      +lastActive: DateTime @1727484173 {#3155
        date: 2024-09-28 02:42:53.0 +02:00
      }
      +markedForDeletionAt: null
      +fields: null
      +oauthGithubId: null
      +oauthGoogleId: null
      +oauthFacebookId: null
      +oauthKeycloakId: null
      +hideAdult: true
      +showSubscribedUsers: true
      +showSubscribedMagazines: true
      +showSubscribedDomains: true
      +preferredLanguages: []
      +featuredMagazines: null
      +showProfileSubscriptions: false
      +showProfileFollowings: true
      +markNewComments: false
      +notifyOnNewEntry: false
      +notifyOnNewEntryReply: true
      +notifyOnNewEntryCommentReply: true
      +notifyOnNewPost: false
      +notifyOnNewPostReply: true
      +notifyOnNewPostCommentReply: true
      +addMentionsEntries: false
      +addMentionsPosts: true
      +isBanned: false
      +isVerified: false
      +isDeleted: false
      +isBot: false
      +spamProtection: true
      +customCss: null
      +ignoreMagazinesCustomCss: false
      +moderatorTokens: Doctrine\ORM\PersistentCollection {#3160 …}
      +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#3163 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#3165 …}
      +entries: Doctrine\ORM\PersistentCollection {#3167 …}
      +entryVotes: Doctrine\ORM\PersistentCollection {#3169 …}
      +entryComments: Doctrine\ORM\PersistentCollection {#3171 …}
      +entryCommentVotes: Doctrine\ORM\PersistentCollection {#3185 …}
      +posts: Doctrine\ORM\PersistentCollection {#3176 …}
      +postVotes: Doctrine\ORM\PersistentCollection {#3199 …}
      +postComments: Doctrine\ORM\PersistentCollection {#3220 …}
      +postCommentVotes: Doctrine\ORM\PersistentCollection {#3251 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#3208 …}
      +subscribedDomains: Doctrine\ORM\PersistentCollection {#3260 …}
      +follows: Doctrine\ORM\PersistentCollection {#3263 …}
      +followers: Doctrine\ORM\PersistentCollection {#3258 …}
      +blocks: Doctrine\ORM\PersistentCollection {#3286 …}
      +blockers: Doctrine\ORM\PersistentCollection {#3282 …}
      +blockedMagazines: Doctrine\ORM\PersistentCollection {#3299 …}
      +blockedDomains: Doctrine\ORM\PersistentCollection {#3303 …}
      +reports: Doctrine\ORM\PersistentCollection {#3287 …}
      +favourites: Doctrine\ORM\PersistentCollection {#3309 …}
      +violations: Doctrine\ORM\PersistentCollection {#3316 …}
      +notifications: Doctrine\ORM\PersistentCollection {#3318 …}
      +awards: Doctrine\ORM\PersistentCollection {#3310 …}
      +subscribedCategories: Doctrine\ORM\PersistentCollection {#3327 …}
      +categories: Doctrine\ORM\PersistentCollection {#3340 …}
      -id: 53233
      -password: "$2y$13$ONerzxs5ikSMZPP7JZz93.L7bi7bpix5PvgJJmsqWoSIfRo3rR8JO"
      -totpSecret: null
      -totpBackupCodes: []
      -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#3351 …}
      +apId: "maltfield@monero.town"
      +apProfileId: "https://monero.town/u/maltfield"
      +apPublicUrl: "https://monero.town/u/maltfield"
      +apFollowersUrl: null
      +apInboxUrl: "https://monero.town/inbox"
      +apDomain: "monero.town"
      +apPreferredUsername: "maltfield"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: false
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1711292170 {#3152
        date: 2024-03-24 15:56:10.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1696724832 {#3154
        date: 2023-10-08 02:27:12.0 +02:00
      }
      +__isInitialized__: true
       …2
    }
    +magazine: App\Entity\Magazine {#316
      +icon: null
      +name: "privacyguides@lemmy.one"
      +title: "privacyguides"
      +description: """
        *In the digital age, protecting your personal information might seem like an impossible task. We’re here to help.*\n
        \n
        This is a community for sharing news about privacy, posting information about cool privacy tools and services, and getting advice about your privacy journey.\n
        \n
        ---\n
        \n
        You can subscribe to this community from any Kbin or Lemmy instance:\n
        \n
        - [Subscribe on Kbin.social](https://kbin.social/m/privacyguides@lemmy.one)\n
        - [Subscribe on Lemmy.one](https://lemmy.one/c/privacyguides)\n
        - [Subscribe on Lemmy.ml](https://lemmy.ml/c/privacyguides@lemmy.one)\n
        - [Subscribe on Beehaw.org](https://beehaw.org/c/privacyguides@lemmy.one)\n
        \n
        [Learn more…](https://lemmy.one/post/355)\n
        \n
        ---\n
        \n
        Check out our website at [privacyguides.org](https://www.privacyguides.org) before asking your questions here. We’ve tried answering the common questions and recommendations there!\n
        \n
        Want to get involved? The website is [open-source on GitHub](https://github.com/privacyguides/privacyguides.org), and your help would be appreciated!\n
        \n
        ---\n
        \n
        **This community is the “official” Privacy Guides community on Lemmy, which can be [verified here](https://www.reddit.com/r/PrivacyGuides/comments/13x7oe3/who_wants_to_try_out_lemmy_privacyguideslemmyone/). Other “Privacy Guides” communities on other Lemmy servers are not moderated by this team or associated with the website.**\n
        \n
        ---\n
        \n
        **Moderation Rules:**\n
        \n
        1. We prefer posting about open-source software whenever possible.\n
        2. This is not the place for self-promotion if you are not listed on privacyguides.org. If you want to be listed, [make a suggestion on our forum first](https://discuss.privacyguides.net/c/site-development/suggestions/6).\n
        3. No soliciting engagement: Don’t ask for upvotes, follows, etc.\n
        4. Surveys, Fundraising, and Petitions must be **pre**-approved by the mod team.\n
        5. Be civil, no violence, hate speech. Assume people here are posting in good faith.\n
        6. Don’t repost topics which have already been covered here.\n
        7. News posts must be related to privacy and security, and **your post title must match the article headline exactly.** Do not editorialize titles, you can post your opinions in the post body or a comment.\n
        8. Memes/images/video posts that could be summarized as text explanations should not be posted. Infographics and conference talks from reputable sources are acceptable.\n
        9. **No help vampires:** This is not a tech support subreddit, don’t abuse our community’s willingness to help. Questions related to privacy, security or privacy/security related software and their configurations are acceptable.\n
        10. No misinformation: Extraordinary claims must be matched with **evidence.**\n
        11. Do not post about VPNs or cryptocurrencies which are not listed on [privacyguides.org](https://www.privacyguides.org/en/tools/). See Rule 2 for info on adding new recommendations to the website.\n
        12. General guides or software lists are not permitted. Original sources and research about specific topics are allowed as long as they are high quality and factual. **We are not providing a platform for poorly-vetted, out-of-date or conflicting recommendations.**\n
        \n
        ---\n
        \n
        Additional Resources:\n
        \n
        - [EFF: Surveillance Self-Defense](https://ssd.eff.org/)\n
        - [Consumer Reports Security Planner](https://securityplanner.consumerreports.org/)\n
        - [Jonah Aragon](https://www.jonaharagon.com) ([YouTube](https://youtube.com/@jonaharagon))\n
        - [r/Privacy](https://www.reddit.com/r/Privacy)\n
        - [Big Ass Data Broker Opt-Out List](https://github.com/yaelwrites/Big-Ass-Data-Broker-Opt-Out-List)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 259
      +entryCommentCount: 2490
      +postCount: 5
      +postCommentCount: 29
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729537882 {#324
        date: 2024-10-21 21:11:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#304 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#300 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#289 …}
      +entries: Doctrine\ORM\PersistentCollection {#247 …}
      +posts: Doctrine\ORM\PersistentCollection {#205 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#267 …}
      +bans: Doctrine\ORM\PersistentCollection {#184 …}
      +reports: Doctrine\ORM\PersistentCollection {#170 …}
      +badges: Doctrine\ORM\PersistentCollection {#148 …}
      +logs: Doctrine\ORM\PersistentCollection {#138 …}
      +awards: Doctrine\ORM\PersistentCollection {#127 …}
      +categories: Doctrine\ORM\PersistentCollection {#114 …}
      -id: 39
      +apId: "privacyguides@lemmy.one"
      +apProfileId: "https://lemmy.one/c/privacyguides"
      +apPublicUrl: "https://lemmy.one/c/privacyguides"
      +apFollowersUrl: "https://lemmy.one/c/privacyguides/followers"
      +apInboxUrl: "https://lemmy.one/inbox"
      +apDomain: "lemmy.one"
      +apPreferredUsername: "privacyguides"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729576084 {#325
        date: 2024-10-22 07:48:04.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1696630878 {#319
        date: 2023-10-07 00:21:18.0 +02:00
      }
    }
    +image: Proxies\__CG__\App\Entity\Image {#2412 …}
    +domain: Proxies\__CG__\App\Entity\Domain {#1794 …}
    +slug: "QubesOS-Disarm-BusKill-Dead-Man-Switch-with-Keyboard-Shortcut-Guide"
    +title: "[QubesOS] Disarm BusKill Dead Man Switch with Keyboard Shortcut (Guide)"
    +url: "https://www.buskill.in/qubes-disarm/"
    +body: """
      This article describes how to setup keyboard shortcuts in QubesOS so that you can temporarily disarm (pause) the BusKill laptop kill cord.\n
      \n
      This allows the user to, for example, go to the bathroom without causing their computer to shutdown or self-destruct.\n
      \n
      [![Arm  Disarm BusKill in QubesOS](https://www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_featuredImage.jpg)](https://buskill.in/qubes-disarm)\n
      \n
      This is a guide that builds on part one: [A Laptop Kill Cord for QubesOS (1/2)](/qubes-os/). Before reading this, you should already be familiar with how to [setup udev rules for BusKill on QubesOS](https://www.buskill.in/qubes-os/).\n
      \n
      1. [A Laptop Kill Cord for QubesOS (1/2)](/qubes-os/)\n
      2. Disarm BusKill in QubesOS (2/2)\n
      \n
      > ⓘ Note: This post is adapted from its original [article on Tom Hocker's blog](https://humandecoded.io/qubes-os-yubikey-buskill/).\n
      \n
      What is BusKill?\n
      ================\n
      \n
      > What if someone literally steals your laptop while you're working with classified information inside a Whonix DispVM? They'd also be able to recover data from previous DispVMs--as Disposable VM's rootfs virtual files are *not* securely shredded after your DispVM is destroyed.\n
      \n
      Are you a security researcher, journalist, or intelligence operative that works in QubesOS--exploiting Qubes' [brilliant security-through-compartimentalization](https://freedom.press/news/the-operating-system-that-can-protect-you-even-if-you-get-hacked/)to keep your data safe? Do you make use of Whonix [Disposable VMs](https://www.qubes-os.org/doc/disposablevm/) for your work? Great! This post is for you.\n
      \n
      I'm sure your QubesOS laptop has Full Disk Encryption and you're using a strong passphrase. But what if someone literally steals your laptop while you're working with classified information inside a Whonix DispVM? Not only will they get access to all of your AppVM's private data and the currently-running Whonix DispVM's data, but there's a high chance they'd be able to recover data from [previous DispVMs](https://www.whonix.org/wiki/Qubes/DisposableVM#Warnings)--as **Disposable VM's rootfs virtual files ([volatile.img](https://groups.google.com/forum/#!topic/qubes-devel/QwL5PjqPs-4/discussion)) are [*not* securely shredded](https://github.com/QubesOS/qubes-issues/issues/904) after your DispVM is destroyed** by Qubes!\n
      \n
      Let's say you're a journalist, activist, whistleblower, or a human rights worker in an oppressive regime. Or an intelligence operative behind enemy lines doing research or preparing a top-secret document behind a locked door. What do you do to protect your data, sources, or assets when the secret police suddenly batter down your door? How quickly can you *actually* act to shutdown your laptop and shred your RAM and/or FDE encryption keys?\n
      \n
      | [![BusKill Demo](https://www.buskill.in/wp-content/uploads/sites/8/2020/02/busKillDemo.mp4)](https://www.buskill.in/#demo) |\n
      |---|\n
      | *Watch the [BusKill Explainer Video](https://www.buskill.in/#demo) for more info [youtube.com/v/qPwyoD_cQR4](https://www.youtube.com/v/qPwyoD_cQR4)* |\n
      \n
      BusKill utilizes a magnetic trip-wire that tethers your body to your laptop. If you suddenly jump to your feet or fall off your chair (in response to the battering ram crashing through your door) or your laptop is ripped off your table by a group of armed thugs, the data bus' magnetic connection will be severed. This event causes a configurable *trigger* to execute.\n
      \n
      The BusKill `trigger` can be anything from:\n
      \n
      1. locking your screen or\n
      2. shutting down the computer or\n
      3. initiating a [self-destruct](/luks-self-destruct/) sequence\n
      \n
      While our [last post](qubes-os) described how to setup such a system in QubesOS with BusKill, *this* post will describe how to add keyboard shortcuts to arm & disarm the dead man switch (eg so you can go to the bathroom).\n
      \n
      Disclaimer\n
      ==========\n
      \n
      This guide contains experimental files, commands, and software. The information contained in this article may or may not lead to corruption or total permanent deletion of some or all of your data. We've done our best to carefully guide the user so they know the risks of each BusKill trigger, but we cannot be responsible for any data loss that has occurred as a result of following this guide.\n
      \n
      The contents of this guide is provided openly and is licensed under the [CC-BY-SA](https://creativecommons.org/licenses/by-sa/4.0/) license. The software included in this guide is licensed under the [GNU GPLv3](https://www.gnu.org/licenses/gpl-3.0.html) license. All content here is consistent with the limitations of liabilities outlined in its respective licenses.\n
      \n
      We highly recommend that any experiments with the scripts included in this article are used exclusively on a disposable machine containing no valuable data.\n
      \n
      If data loss is a concern for you, then leave now and do not proceed with following this guide. You have been warned.\n
      \n
      Release Note\n
      ------------\n
      \n
      Also be aware that, due to the risks outlined above, BusKill will *not*be released with this "self-destruct" trigger.\n
      \n
      If you [purchase](/buy)a BusKill cable, it will only ship with non-destructive triggers that lock the screen or shutdown the computer. Advanced users can follow guides to add additional destructive triggers, such as the one described in this post, but they should do so at their own risk--taking carefully into consideration all of the warnings outlined above and throughout this article.\n
      \n
      **Again, if you [buy](/buy) a BusKill cable, the worst that can happen is your computer will abruptly shutdown.**\n
      \n
      Assumptions\n
      ===========\n
      \n
      This guide necessarily makes several assumptions outlined below.\n
      \n
      sys-usb\n
      -------\n
      \n
      In this guide, we assume that your QubesOS install has a [USB-Qube](https://www.qubes-os.org/doc/usb-qubes/) named '`sys-usb`' for handling [USB events](https://www.qubes-os.org/doc/usb-devices/) on behalf of `dom0`.\n
      \n
      If you decided to combine your USB and networking Qubes at [install time](https://www.qubes-os.org/doc/installation-guide/#initial-setup), then replace all references in this guide for '`sys-usb`' to '`sys-net`'.\n
      \n
      If you decided to run your '`sys-usb`' VM as a DispoableVM at [install time](https://github.com/QubesOS/qubes-issues/issues/6684#issuecomment-1435381919), then replace all references in this guide for '`sys-usb`' its Disposable TemplateVM (eg '`fedora-36-dvm`').\n
      \n
      …And if you chose not to isolate your USB devices, then [may god help you](https://blog.invisiblethings.org/2011/05/31/usb-security-challenges.html).\n
      \n
      Udev Device Matching\n
      --------------------\n
      \n
      BusKill in Linux uses [udev](https://en.wikipedia.org/wiki/Udev) to detect when the USB's cable is severed. The exact udev rule that you use in the files below will depend on the drive you choose to use in your BusKill cable.\n
      \n
      In this guide, we identify our BusKill-specific drive with the '`ENV{ID_MODEL}==“Micromax_A74”`' [udev property](https://wiki.archlinux.org/index.php/Udev#udev_rule_example). You should replace this property with one that matches your BusKill-specific drive.\n
      \n
      To determine how to query your USB drive for device-specific identifiers, see [Introducing BusKill: A Kill Cord for your Laptop](/buskill-laptop-kill-cord-dead-man-switch/#software). Note that the ``udevadm monitor --environment --udev`` command should be run in the '`sys-usb`' Qube.\n
      \n
      > ⓘ Note: If you'd prefer to buy a BusKill cable than make your own, you can buy one fully assembled [here](/buy).\n
      \n
      QubesOS Version\n
      ---------------\n
      \n
      This guide was written for QubesOS v4.1.\n
      \n
      ```\n
      \n
      <span style="color:#323232;">[user@dom0 ~]$ cat /etc/redhat-release Qubes release 4.1.2 (R4.1)\n
      </span><span style="color:#323232;">[user@dom0 ~]$\n
      </span>\n
      ```\n
      \n
      BusKill Files\n
      =============\n
      \n
      This section will describe what files should be created and where.\n
      \n
      Due to the design of QubesOS, it takes a bit of mental gymnastics to understand what we're doing and why. It's important to keep in mind that, in QubesOS\n
      \n
      1. The keyboard and UI are configured in '`dom0’`\n
      2. USB devices (like the BusKill device) are routed to the '`sys-usb`' VM\n
      3. dom0 has the privilege to execute scripts inside other VMs (eg '`sys-usb`')\n
      4. By design, VMs should *not* be able to send arbitrary commands to be executed in dom0\n
      5. .…but via the [qubes-rpc](https://www.qubes-os.org/doc/qrexec/#qubes-rpc-services), we *can* permit some VMs (eg '`sys-usb`') to execute a script in dom0 (though for security reasons, ideally such that no data/input is sent from the less-trusted VM to dom0 -- other than the name of the script)\n
      \n
      Due to the constraints listed above:\n
      \n
      1. We'll be configuring the disarm button as keyboard shortcut in dom0\n
      2. We'll be saving and executing the '`buskill-disarm.sh`' script in '`sys-usb`' (because these scripts manipulate our udev rules)\n
      3. The keyboard shortcut in dom0 will *actually* be executing the above script in '`sys-usb`'\n
      \n
      sys-usb\n
      -------\n
      \n
      If you followed our [previous guide to setting-up BusKill in QubesOS](/qubes-os/), then you should already have a file in '`sys-usb`' at '`/rw/config/buskill.rules`'. You may even have modified it to trigger a [LUKS Self-Destruct](/luks-self-destruct/) on removal of your BusKill device.\n
      \n
      Because you're *now* experimenting with a new setup, let's go ahead and wipe out that old file with a new one that *just* executes a soft-shutdown. You might need some days to get used to the new disarm procedure, and you probably don't want to suddenly loose all your data due to an accidental false-positive!\n
      \n
      Execute the following on your '`sys-usb`' Qube:\n
      \n
      ```\n
      \n
      <span style="color:#323232;">mv /rw/config/buskill.rules /rw/config/buskill.rules.bak.`date "+%Y%m%d_%H%M%S"`\n
      </span><span style="color:#323232;">cat &lt;&lt; EOF | sudo tee /rw/config/buskill.rules\n
      </span><span style="color:#323232;">################################################################################\n
      </span><span style="color:#323232;"># File:    sys-usb:/etc/udev/rules.d/buskill.rules -> /rw/config/buskill.rules\n
      </span><span style="color:#323232;"># Purpose: Add buskill rules. For more info, see: https://buskill.in/qubes-os/\n
      </span><span style="color:#323232;"># Authors: Michael Altfield \n
      </span><span style="color:#323232;"># Created: 2020-01-02\n
      </span><span style="color:#323232;"># License: GNU GPLv3\n
      </span><span style="color:#323232;">################################################################################\n
      </span><span style="color:#323232;">ACTION=="remove", SUBSYSTEM=="usb", ENV{ID_MODEL}=="Micromax_A74", RUN+="/usr/bin/qrexec-client-vm dom0 buskill.softShutdown"\n
      </span><span style="color:#323232;">EOF\n
      </span><span style="color:#323232;">sudo ln -s /rw/config/buskill.rules /etc/udev/rules.d/\n
      </span><span style="color:#323232;">sudo udevadm control --reload\n
      </span>\n
      ```\n
      \n
      Now, let's add a new udev '`.rules`' file. This one will always *just* lock your screen, and it's what will be put in-place when BusKill is "disarmed".\n
      \n
      Execute the following on your '`sys-usb`' Qube:\n
      \n
      ```\n
      \n
      <span style="color:#323232;">cat &lt;&lt; EOF | sudo tee /rw/config/buskill.lock.rules\n
      </span><span style="color:#323232;">################################################################################\n
      </span><span style="color:#323232;"># File:    sys-usb:/etc/udev/rules.d/buskill.rules -> /rw/config/buskill.lock.rules\n
      </span><span style="color:#323232;"># Purpose: Just lock the screen. For more info, see: https://buskill.in/qubes-os/\n
      </span><span style="color:#323232;"># Authors: Michael Altfield \n
      </span><span style="color:#323232;"># Created: 2023-05-10\n
      </span><span style="color:#323232;"># License: GNU GPLv3\n
      </span><span style="color:#323232;">################################################################################\n
      </span><span style="color:#323232;">ACTION=="remove", SUBSYSTEM=="usb", ENV{ID_MODEL}=="Micromax_A74", RUN+="/usr/bin/qrexec-client-vm dom0 buskill.lock"\n
      </span><span style="color:#323232;">EOF\n
      </span>\n
      ```\n
      \n
      The careful reader will see that we're not *actually* disarming BusKill in the same sense as our [BusKill GUI app](https://github.com/buskill/buskill-app/). Indeed, what we're *actually* going to do is swap these two files for 30 seconds.\n
      \n
      This way, if BusKill is armed and you remove the cable, your computer shuts-down.\n
      \n
      But if you want to disarm, the procedure becomes:\n
      \n
      1. Hit the "Disarm BusKill" keyboard shortcut (see below)\n
      2. Wait for the toast popup message indicating that BusKill is now disarmed\n
      3. Remove the cable within 30 seconds\n
      4. Your screen locks (instead of shutting down)\n
      \n
      Personally, I can't think of a QubesOS user that would want to leave their machine unlocked when they go to the bathroom, so I figured this approach would work better than an *actual* disarm.\n
      \n
      Bonus: when you return from your break, just plug-in the BusKill cable in, and it'll already be armed (reducing the risk of user error due to forgetting to arm BusKill).\n
      \n
      Now, let's add the actual '`buskill-disarm.sh`' script to disarm BusKill:\n
      \n
      Execute the following on your '`sys-usb`' Qube:\n
      \n
      ```\n
      \n
      <span style="color:#323232;">cat &lt;&lt; EOF | sudo tee /usr/local/bin/buskill-disarm.sh\n
      </span><span style="color:#323232;">#!/bin/bash\n
      </span><span style="color:#323232;"> \n
      </span><span style="color:#323232;">################################################################################\n
      </span><span style="color:#323232;"># File:    sys-usb:/usr/local/bin/buskill-disarm.sh\n
      </span><span style="color:#323232;"># Purpose: Temp disarm BusKill. For more info, see: https://buskill.in/qubes-os/\n
      </span><span style="color:#323232;"># Authors: Tom \n
      </span><span style="color:#323232;"># Co-Auth: Michael Altfield \n
      </span><span style="color:#323232;"># Created: 2023-05-10\n
      </span><span style="color:#323232;"># License: GNU GPLv3\n
      </span><span style="color:#323232;">################################################################################\n
      </span><span style="color:#323232;"> \n
      </span><span style="color:#323232;"># replace the 'shutdown' trigger with the 'lock' trigger\n
      </span><span style="color:#323232;">sudo rm /etc/udev/rules.d/buskill.rules\n
      </span><span style="color:#323232;">sudo ln -s /rw/config/buskill.lock.rules /etc/udev/rules.d/buskill.rules\n
      </span><span style="color:#323232;">sudo udevadm control --reload\n
      </span><span style="color:#323232;"> \n
      </span><span style="color:#323232;"># let the user know that BusKill is now temporarily disarmed\n
      </span><span style="color:#323232;">notify-send -t 21000 "BusKill" "Disarmed for 30 seconds" -i changes-allow\n
      </span><span style="color:#323232;"> \n
      </span><span style="color:#323232;"># wait 30 seconds\n
      </span><span style="color:#323232;">sleep 30\n
      </span><span style="color:#323232;"> \n
      </span><span style="color:#323232;"># replace the 'lock' trigger with the 'shutdown' trigger\n
      </span><span style="color:#323232;">sudo rm /etc/udev/rules.d/buskill.rules\n
      </span><span style="color:#323232;">sudo ln -s /rw/config/buskill.rules /etc/udev/rules.d/buskill.rules\n
      </span><span style="color:#323232;">sudo udevadm control --reload\n
      </span><span style="color:#323232;">notify-send -t 5000 "BusKill" "BusKill is Armed" -i changes-prevent\n
      </span><span style="color:#323232;">EOF\n
      </span><span style="color:#323232;">sudo chmod +x /usr/local/bin/buskill-disarm.sh\n
      </span>\n
      ```\n
      \n
      dom0\n
      ----\n
      \n
      If you followed our [previous guide to setting-up BusKill in QubesOS](/qubes-os/), then you shouldn't need to add any files to dom0. What you *do* need to do is setup some keyboard shortcuts.\n
      \n
      In the QubesOS GUI, click on the big `Q` "Start Menu" in the top-left of your XFCE panel to open the Applications menu. Navigate to '`System Tools`' and click Keyboard\n
      \n
      | [![Screenshot of QubesOS with an arrow pointing to the “Q” Application Menu in the very top-left of the screen](https://www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_menu1.png)](https://buskill.in/qubes-disarm) | [![Screenshot of QubesOS Application Menu with “System Tools -> Keyboard” highlighted](https://www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_menu2.png)](https://www.buskill.in/qubes-disarm/) |\n
      |---|---|\n
      | Click the “Q” to open the QubesOS Application Menu | Click System Tools -&gt; Keyboard |\n
      \n
      Click the '`Application Shortcuts`' Tab and then click the '`+ Add`' button on the bottom-left of the window.\n
      \n
      | [![Screenshot of QubesOS Keyboard Settings Window that shows the “Application Shortcuts” tab highlighted’alt](https://www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings1.png)](https://www.buskill.in/qubes-disarm/) | [![Screenshot of QubesOS Keyboard Settings Window that shows the “+ Add” button highlightedalt](https://www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-add1.jpg.png)](https://www.buskill.in/qubes-disarm/) |\n
      |---|---|\n
      | Click the “Application Shortcuts” tab to add a Keyboard Shortcut in Qubes | Click the “Add” Button to add a new Keyboard Shortcut in Qubes |\n
      \n
      In the '`Command`' input field, type the following\n
      \n
      ```\n
      \n
      <span style="color:#323232;">qvm-run sys-usb buskill-disarm.sh\n
      </span>\n
      ```\n
      \n
      The above command will execute a command in '`dom0`' that will execute a command in '`sys-usb`' that will execute the '`buskill-disarm.sh`' script that we created above.\n
      \n
      | [![Screenshot of QubesOS Keyboard Settings Window that shows the OK button highlighted](https://www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-add2.png)](https://www.buskill.in/qubes-disarm/) |\n
      |---|\n
      | After typing the command to be executed when the keyboard shortcut is pressed, click the "OK" button |\n
      \n
      Now click "OK" and, when prompted, type Ctrl+Shift+D (or whatever keyboard shortcut you want to bind to "Disarming BusKill").\n
      \n
      | [![Screenshot of QubesOS Keyboard Settings Window that shows the prompt "Press now the keyboard keys you want to use to trigger the command…"alt](https://www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-add3.png)](https://www.buskill.in/qubes-disarm/) | [![Screenshot of QubesOS Keyboard Settings Window that shows the selected Shortcut "Shift+Ctrl+D"](https://www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-add4.png)](https://www.buskill.in/qubes-disarm/) |\n
      |---|---|\n
      | Type “Ctrl+Shift+D” or whatever keyboard shortcut you want to trigger BusKill to be disarmed for 30 seconds |  |\n
      \n
      You should now have a keyboard shortcut binding for disarming BusKill!\n
      \n
      [![Screenshot of QubesOS\n
      Keyboard Settings Window that shows the newly created keyboard shortcut\n
      for Shift+Ctrl+D at the top of the\n
      list](https://www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-added1.png)](https://www.buskill.in/qubes-disarm/)\n
      \n
      Test It!\n
      ========\n
      \n
      At this point, you can test your new (temporary) BusKill Disarm functionality by:\n
      \n
      1. Plugging-in your BusKill cable\n
      2. Typing Ctrl+Shift+D\n
      3. Waiting for the toast popup message to appear indicating that BusKill is disarmed for 30 seconds\n
      4. Unplugging your BusKill cable\n
      \n
      Your machine should lock, not shutdown.\n
      \n
      | [![Screenshot of QubesOS with a toast message in the top-right that says BusKill Disarmed for 30 Seconds](https://www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_buskill-disarmed1.png)](https://www.buskill.in/qubes-disarm/) |\n
      |---|\n
      | After hitting the keyboard shortcut to disarm BusKill, you have 30 seconds to remove the cable |\n
      \n
      After 30 seconds, return to your computer and test the normal "arm" functionality:\n
      \n
      1. Plug-in your BusKill cable\n
      2. Unlock your screen\n
      3. Unplug your BusKill cable\n
      \n
      Your computer should shutdown, not lock.\n
      \n
      | [![Screenshot of QubesOS with a toast message in the top-right that says BusKill is Armed](https://www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_buskill-armed1.png)](https://www.buskill.in/qubes-disarm/) |\n
      |---|\n
      | 30 seconds after hitting the keyboard shortcut, BusKill will arm itself |\n
      \n
      Troubleshooting\n
      ===============\n
      \n
      Is unplugging your USB device doing nothing? Having other issues?\n
      \n
      See the [Troubleshooting section](https://buskill.in/qubes-os/#troubleshooting) in our original guide to using BusKill on QubesOS.\n
      \n
      Limitations/Improvements\n
      ========================\n
      \n
      Security is porous. All software has bugs. Nothing is 100% secure. For more limitations to using BusKill on QubesOS, see the [Limitations section](https://busill.in/qubes-os/#limitations) in our original guide to using BusKill on QubesOS.\n
      \n
      Buy a BusKill Cable\n
      ===================\n
      \n
      We look forward to continuing to improve the BusKill software and making BusKill more accessible this year. If you want to help, [please consider purchasing a BusKill cable](https://buskill.in/buy) for yourself or a loved one. It helps us fund further development, and you get your own BusKill cable to keep you or your loved ones safe.\n
      \n
      You can also buy a BusKill cable with bitcoin, monero, and other altcoins from our [BusKill Store’s .onion site](http://buskillvampfih2iucxhit3qp36i2zzql3u6pmkeafvlxs3tlmot5yad.onion/buy/).\n
      \n
      Stay safe,  \n
      The BusKill Team  \n
      [www.buskill.in](https://www.buskill.in/)  \n
      [buskillvampfih2iucxhit3qp36i2zzql3u6pmkeafvlxs3tl…](http://www.buskillvampfih2iucxhit3qp36i2zzql3u6pmkeafvlxs3tlmot5yad.onion)
      """
    +type: "link"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 0
    +favouriteCount: 4
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1696353188 {#1870
      date: 2023-10-03 19:13:08.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1843 …}
    +votes: Doctrine\ORM\PersistentCollection {#1879 …}
    +reports: Doctrine\ORM\PersistentCollection {#1885 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1395 …}
    +notifications: Doctrine\ORM\PersistentCollection {#1890 …}
    +badges: Doctrine\ORM\PersistentCollection {#1935 …}
    +children: []
    -id: 3502
    -titleTs: "'buskil':3 'dead':4 'disarm':2 'guid':10 'keyboard':8 'man':5 'qubeso':1 'shortcut':9 'switch':6"
    -bodyTs: "'-01':1485 '-02':1486 '-05':1581,1821 '-10':1582,1822 '-36':936 '/#demo)':408 '/)':2618 '/2011/05/31/usb-security-challenges.html).':955 '/bin/bash':1795 '/buskill-laptop-kill-cord-dead-man-switch':1058 '/buskill/buskill-app/).':1623 '/buy':745,811,1099 '/buy)':2559 '/buy/).':2609 '/doc/disposablevm/)':208 '/doc/installation-guide/#initial-setup),':885 '/doc/qrexec/#qubes-rpc-services),':1228 '/doc/usb-devices/)':865 '/doc/usb-qubes/)':854 '/etc/redhat-release':1112 '/etc/udev/rules.d':1508 '/etc/udev/rules.d/buskill.rules':1467,1562,1836,1841,1885,1890 '/forum/#!topic/qubes-devel/qwl5pjqps-4/discussion))':305 '/index.php/udev#udev_rule_example).':1021 '/licenses/by-sa/4.0/)':639 '/licenses/gpl-3.0.html)':655 '/luks-self-destruct':505,1370 '/news/the-operating-system-that-can-protect-you-even-if-you-get-hacked/)to':193 '/qubes-os':68,98,1343,1927 '/qubes-os-yubikey-buskill/).':122 '/qubes-os/':1479,1575,1811 '/qubes-os/#limitations)':2515 '/qubes-os/#troubleshooting)':2479 '/qubes-os/).':89 '/qubesos/qubes-issues/issues/6684#issuecomment-1435381919),':919 '/qubesos/qubes-issues/issues/904)':312 '/rw/config/buskill.lock.rules':1557,1563,1840 '/rw/config/buskill.rules':1356,1449,1462,1468,1507,1889 '/rw/config/buskill.rules.bak':1450 '/usr/bin/qrexec-client-vm':1500,1596 '/usr/local/bin/buskill-disarm.sh':1794,1800,1912 '/v/qpwyod_cqr4](https://www.youtube.com/v/qpwyod_cqr4)*':414 '/wiki/qubes/disposablevm#warnings)--as':295 '/wiki/udev)':966 '/wp-content/uploads/sites/8/2020/02/buskilldemo.mp4)](https://www.buskill.in/#demo)':400 '/wp-content/uploads/sites/8/qubes-disarm_buskill-armed1.png)](https://www.buskill.in/qubes-disarm/)':2450 '/wp-content/uploads/sites/8/qubes-disarm_buskill-disarmed1.png)](https://www.buskill.in/qubes-disarm/)':2379 '/wp-content/uploads/sites/8/qubes-disarm_featuredimage.jpg)](https://buskill.in/qubes-disarm)':51 '/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-add1.jpg.png)](https://www.buskill.in/qubes-disarm/)':2082 '/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-add2.png)](https://www.buskill.in/qubes-disarm/)':2164 '/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-add3.png)](https://www.buskill.in/qubes-disarm/)':2229 '/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-add4.png)](https://www.buskill.in/qubes-disarm/)':2246 '/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-added1.png)](https://www.buskill.in/qubes-disarm/)':2302 '/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings1.png)](https://www.buskill.in/qubes-disarm/)':2067 '/wp-content/uploads/sites/8/qubes-disarm_menu1.png)](https://buskill.in/qubes-disarm)':2005 '/wp-content/uploads/sites/8/qubes-disarm_menu2.png)](https://www.buskill.in/qubes-disarm/)':2018 '1':90,488,1163,1276,1665,2318,2409 '1/2':67,97 '100':2499 '2':99,493,1172,1289,1674,2325,2416 '2/2':104 '2020':1484 '2023':1580,1820 '21000':1860 '3':499,1187,1310,1687,2330,2420 '30':1638,1692,1864,1871,1874,2264,2345,2375,2390,2397,2451 '4':1202,1694,2347 '4.1.2':1115 '5':1219 '5000':1899 'a74':1016,1498,1594 'abl':148,286,1209 'abrupt':824 'access':259,2543 'accident':1435 'act':383 'action':1490,1586 'activist':327 'actual':382,1317,1609,1628,1735,1775 'adapt':110 'add':531,772,1470,1516,1773,1934,2041,2077,2089,2097,2100 'addit':773 'advanc':766 'ahead':1389 'allow':24,1869 'alreadi':74,1347,1755 'also':146,721,2589 'alt':2064,2226 'altcoin':2599 'altfield':1482,1578,1818 'alway':1525 'and/or':392 'anyth':486 'app':1620 'appear':2338 'applic':1973,1992,2009,2026,2034,2060,2085 'approach':1729 'appvm':264 'arbitrari':1212 'arm':44,463,535,1645,1757,1768,1903,2407,2447,2460 'arrow':1987 'articl':2,114,563,684,806 'assembl':1097 'asset':368 'assum':842 'assumpt':826,832 'auth':1816 'author':1480,1576,1812 'awar':723 'bathroom':33,548,1724 'batter':374,445 'becom':1664 'behalf':867 'behind':342,354 'best':586 'better':1732 'big':1957 'bind':2199,2273 'bit':1141 'bitcoin':2595 'blog':119 'blog.invisiblethings.org':954 'blog.invisiblethings.org/2011/05/31/usb-security-challenges.html).':953 'bodi':425 'bonus':1737 'bottom':2046 'bottom-left':2045 'break':1743 'brilliant':186 'bug':2496 'build':57 'bus':467 'busill.in':2514 'busill.in/qubes-os/#limitations)':2513 'buskil':19,46,84,101,125,396,403,415,482,524,599,731,747,813,959,998,1007,1033,1051,1086,1119,1177,1340,1375,1471,1541,1611,1618,1643,1669,1683,1749,1769,1780,1804,1851,1861,1900,1901,1924,2202,2259,2276,2314,2323,2341,2350,2372,2387,2414,2423,2445,2458,2486,2506,2522,2527,2537,2541,2555,2577,2592,2602,2613 'buskill-disarm.sh':1297,1776,2121,2144 'buskill-specif':1006,1032 'buskill.in':1478,1574,1810,2478,2558 'buskill.in/buy)':2557 'buskill.in/qubes-os/':1477,1573,1809 'buskill.in/qubes-os/#troubleshooting)':2477 'buskill.lock':1598 'buskill.softshutdown':1502 'buskillvampfih2iucxhit3qp36i2zzql3u6pmkeafvlxs3tl':2619 'buskillvampfih2iucxhit3qp36i2zzql3u6pmkeafvlxs3tlmot5yad.onion':2608 'buskillvampfih2iucxhit3qp36i2zzql3u6pmkeafvlxs3tlmot5yad.onion/buy/).':2607 'button':1283,2042,2078,2098,2160,2181 'buy':810,1084,1094,2525,2590 'cabl':748,814,973,999,1087,1650,1690,1750,2324,2351,2395,2415,2424,2528,2556,2578,2593 'cannot':603 'care':588,794,1601 'cat':1111,1458,1553,1790 'caus':35,475 'cc':634 'cc-by-sa':633 'chair':440 'chanc':282 'chang':1868,1906 'changes-allow':1867 'changes-prev':1905 'chmod':1910 'choos':993 'chose':941 'classifi':138,248 'click':1954,1980,2019,2028,2032,2039,2083,2095,2178,2183 'co':1815 'co-auth':1814 'combin':874 'command':555,1067,1213,2109,2124,2128,2135,2168,2225 'compartiment':190 'comput':37,497,765,822,1652,2402,2426 'concern':701 'configur':477,1169,1280 'connect':469 'consid':2552 'consider':796 'consist':661 'constraint':1273 'contain':552,560,692 'content':621,658 'continu':2533 'control':1511,1844,1893 'cord':22,64,94,1054 'corrupt':570 'crash':447 'creat':1129,1483,1579,1819,2148,2287 'creativecommons.org':638 'creativecommons.org/licenses/by-sa/4.0/)':637 'ctrl':2189,2242,2248,2292,2327 'current':271 'currently-run':270 'd':145,284,1081,1454,2191,2243,2250,2293,2329 'data':151,196,267,276,289,365,466,581,608,695,697,1431 'data/input':1252 'date':1451 'day':1411 'dead':538 'decid':872,903 'delet':574 'demo':397 'depend':988 'describ':3,514,528,780,1124 'design':1135,1204 'destroy':170,317 'destruct':43,504,740,756,774,1369 'detect':968 'determin':1037 'develop':2571 'devic':947,957,1046,1174,1178,1376,2467 'device-specif':1045 'disarm':16,45,100,536,1282,1418,1543,1610,1661,1668,1686,1736,1779,1803,1855,1862,2201,2262,2275,2315,2343,2373,2386 'disclaim':549 'disk':226 'dispoablevm':913 'dispos':156,204,296,690,932 'dispvm':143,154,168,253,274,292,315 'document':353 'dom0':869,1110,1118,1171,1188,1218,1243,1262,1288,1315,1501,1597,1913,1938,2130 'done':584 'door':357,377,450 'drive':991,1009,1035,1043 'due':725,1132,1270,1432,1764 'dvm':937 'eg':541,934,1198,1234 'en.wikipedia.org':965 'en.wikipedia.org/wiki/udev)':964 'encrypt':227,394 'enemi':343 'env':1012,1494,1590 'environ':1065 'eof':1459,1503,1554,1599,1791,1908 'error':1763 'even':1359 'event':474,862 'exact':977 'exampl':29 'exclus':687 'execut':480,1193,1216,1239,1295,1319,1402,1439,1544,1781,2126,2133,2142,2171 'experi':677,1381 'experiment':553 'explain':404 'exploit':184 'fall':437 'fals':1437 'false-posit':1436 'familiar':76 'fde':393 'fedora':935 'feet':435 'field':2111 'figur':1727 'file':161,301,554,985,1120,1126,1350,1395,1463,1521,1558,1636,1796,1936 'follow':617,712,769,1332,1441,1546,1783,1916,2114 'forget':1766 'forward':2531 'freedom.press':192 'freedom.press/news/the-operating-system-that-can-protect-you-even-if-you-get-hacked/)to':191 'full':225 'fulli':1096 'function':2316,2408 'fund':2569 'get':258,1413,2574 'github.com':311,918,1622 'github.com/buskill/buskill-app/).':1621 'github.com/qubesos/qubes-issues/issues/6684#issuecomment-1435381919),':917 'github.com/qubesos/qubes-issues/issues/904)':310 'gnu':651,1488,1584,1824 'go':30,545,1388,1629,1721 'god':950 'gplv3':652,1489,1585,1825 'great':212 'group':461 'groups.google.com':304 'groups.google.com/forum/#!topic/qubes-devel/qwl5pjqps-4/discussion))':303 'gui':1619,1953 'guid':55,551,589,619,624,646,714,770,828,840,892,926,1002,1103,1335,1919,2483,2519 'gymnast':1144 'h':1455 'handl':860 'happen':819 'help':951,2550,2567 'high':281,673 'highlight':2015,2063,2161 'highlightedalt':2079 'hit':1666,2381,2454 'hocker':117 'human':331 'humandecoded.io':121 'humandecoded.io/qubes-os-yubikey-buskill/).':120 'id':1013,1495,1591 'ideal':1248 'identifi':1004,1048 'import':1155 'improv':2535 'in-plac':1537 'includ':643,681 'inde':1624 'indic':1681,2339 'info':411,1475,1571,1807 'inform':139,249,559 'initi':500 'input':2110 'insid':140,250,1195 'instal':846,881,915 'instead':1698 'intellig':178,340 'introduc':1050 'isol':944 'issu':2472 'journalist':176,326 'jump':432 'keep':194,1157,2580 'key':395,2217 'keyboard':7,532,1165,1285,1312,1670,1948,1981,2014,2031,2054,2071,2091,2103,2153,2174,2194,2206,2216,2233,2253,2271,2280,2288,2383,2456 'kill':21,63,93,1053 'know':594,1849 'laptop':20,62,92,132,223,242,387,428,453,1057 'last':509 'lead':568 'leav':705,1715 'left':1965,1999,2047 'less':1258 'less-trust':1257 'let':320,1386,1514,1771,1846 'liabil':666 'licens':630,640,648,656,671,1487,1583,1823 'like':1175 'limit':664,2503,2511 'limitations/improvements':2489 'line':344 'linux':961 'list':1274,2299 'liter':129,239 'll':1278,1291,1754 'ln':1505,1838,1887 'lock':356,489,759,1527,1566,1697,1832,1877,2355,2430 'look':2530 'loos':1428 'loss':609,698 'love':2564,2584 'luk':1366 'm':219,1453,1456 'machin':691,1717,2353 'magnet':418,468 'make':200,830,1089,2540 'man':539 'manipul':1306 'match':958,1030 'may':564,566,949,1358 'mental':1143 'menu':1960,1974,1993,2010,2027 'messag':1680,2336,2364,2437 'michael':1481,1577,1817 'micromax':1015,1497,1593 'might':1408 'mind':1159 'model':1014,1496,1592 'modifi':1361 'monero':2596 'monitor':1064 'mv':1448 'name':855,1266 'navig':1975 'necessarili':829 'need':1409,1932,1942 'net':900 'network':878 'new':1384,1398,1417,1518,2102,2312 'newli':2286 'non':755 'non-destruct':754 'normal':2406 'note':106,720,1060,1078 'noth':2469,2497 'notifi':1857,1896 'notify-send':1856,1895 'occur':612 'ok':2159,2180,2184 'old':1394 'one':60,779,1028,1095,1399,1523,2565,2585 'onion':2605 'open':627,1971,2023 'oper':179,341 'oppress':336 'origin':113,2482,2518 'os':513 'outlin':667,729,801,833 'panel':1969 'part':59 'passphras':234 'paus':17 'perman':573 'permit':1231 'person':1702 'place':1539 'pleas':2551 'plug':1746,2320,2411 'plug-in':1745,2410 'plugging-in':2319 'point':1988,2307 'polic':372 'popup':1679,2335 'porous':2492 'posit':1438 'post':108,214,510,526,783 'prefer':1082 'prepar':348 'press':2177,2213 'prevent':1907 'previous':153,291,1334,1918 'privat':266 'privileg':1191 'probabl':1422 'procedur':1419,1663 'proceed':710 'prompt':2187,2212 'properti':1018,1026 'protect':363 'provid':626 'purchas':744,2553 'purpos':1469,1564,1801 'put':1536 'q':1958,1991,2021 'qube':185,319,512,851,879,1076,1113,1224,1447,1552,1789,2094,2106 'qubes-o':511 'qubes-rpc':1223 'qubeso':10,48,66,86,96,103,183,222,522,845,1100,1107,1137,1162,1342,1709,1926,1952,1984,2008,2025,2053,2070,2152,2205,2232,2279,2360,2433,2488,2508,2524 'queri':1040 'quick':379 'qvm':2116 'qvm-run':2115 'r4.1':1116 'ram':391,446 're':135,230,245,324,1149,1379,1607,1627 'read':70 'reader':1602 'reason':1247 'recommend':674 'recov':150,288 'reduc':1758 'refer':889,923 'regim':337 'releas':719,735,1114 'reload':1512,1845,1894 'remov':1372,1491,1587,1648,1688,2393 'replac':887,921,1024,1826,1875 'research':175,346 'respect':670 'respons':442,605 'result':615 'return':1740,2399 'right':332,2369,2442 'rip':455 'risk':596,728,792,1760 'rm':1835,1884 'rootf':159,299 'rout':1180 'rpc':1225 'rule':82,979,1309,1472,1520 'run':272,905,1070,1499,1595,2117 'sa':636 'safe':197,2586,2611 'save':1293 'say':322,2371,2444 'screen':491,761,1529,1568,1696,2002,2419 'screenshot':1982,2006,2051,2068,2150,2203,2230,2277,2358,2431 'script':680,1194,1241,1269,1298,1305,1322,1777,2145 'second':1639,1693,1865,1872,2265,2346,2376,2391,2398,2452 'secret':352,371 'section':1122,2476,2512 'secur':164,174,188,308,1246,2490,2500 'security-through-compartiment':187 'see':1049,1476,1572,1604,1672,1808,2473,2509 'select':2239 'self':42,503,739,1368 'self-destruct':41,502,738,1367 'send':1211,1858,1897 'sens':1615 'sent':1254 'sequenc':506 'set':1338,1922,2055,2072,2154,2207,2234,2281 'setting-up':1337,1921 'setup':6,80,517,1385,1946 'sever':472,831,975 'shift':2190,2241,2249,2291,2328 'ship':752 'shortcut':8,533,1286,1313,1671,1949,2035,2061,2086,2092,2104,2175,2195,2240,2254,2272,2289,2384,2457 'shouldn':1930 'show':2058,2075,2157,2210,2237,2284 'shred':165,309,389 'shut':494,1654,1700 'shutdown':39,385,763,825,1406,1828,1881,2357,2428 'shuts-down':1653 'site':2606 'sleep':1873 'soft':1405 'soft-shutdown':1404 'softwar':557,642,1059,2494,2538 'someon':128,238 'sourc':366 'specif':1008,1034,1047 'start':1959 'stay':2610 'steal':130,240 'store':2603 'strong':233 'subsystem':1492,1588 'sudden':373,431,1427 'sudo':1460,1504,1509,1555,1792,1834,1837,1842,1883,1886,1891,1909 'sure':220 'swap':1633 'switch':540 'sys':836,857,895,899,908,929,1074,1184,1200,1236,1301,1325,1328,1353,1445,1465,1550,1560,1787,1798,2119,2138 'sys-net':898 'sys-usb':835,856,894,907,928,1073,1183,1199,1235,1300,1324,1327,1352,1444,1464,1549,1559,1786,1797,2118,2137 'system':520,1977,2012,2029 'tab':2036,2062,2087 'tabl':458 'take':793,1139 'team':2614 'tee':1461,1556,1793 'temp':1802 'templatevm':933 'temporari':2313 'temporarili':15,1854 'test':2303,2310,2404 'tether':423 'think':1706 'though':1244 'throughout':804 'thug':464 'time':882,916 'toast':1678,2334,2363,2436 'tom':116,1813 'tool':1978,2013,2030 'top':351,1964,1998,2296,2368,2441 'top-left':1963,1997 'top-right':2367,2440 'top-secret':350 'total':572 'trigger':478,483,600,741,757,775,1364,1829,1833,1878,1882,2223,2258 'trip':420 'trip-wir':419 'troubleshoot':2462,2475 'trust':1259 'two':1635 'type':2112,2166,2188,2247,2326 'udev':81,956,963,978,1017,1066,1308,1519 'udevadm':1063,1510,1843,1892 'ui':1167 'understand':1146 'unlock':1718,2417 'unplug':2348,2421,2464 'us':2568 'usb':837,850,858,861,876,896,909,930,946,971,1042,1075,1173,1185,1201,1237,1302,1326,1329,1354,1446,1466,1493,1551,1561,1589,1788,1799,2120,2139,2466 'usb-qub':849 'use':201,231,686,962,982,995,1414,2221,2485,2505,2521 'user':26,591,767,1109,1117,1710,1762,1848 'util':416 'v4.1':1108 'valuabl':694 've':583 'version':1101 'via':1221 'video':405 'virtual':160,300 'vm':157,297,910,1186,1260 'vms':205,1197,1205,1233 'volatile.img':302 'wait':1675,1870,2331 'want':1425,1659,1713,2197,2219,2256,2548 'warn':718,800 'watch':401 'way':1641 'whatev':2193,2252 'whistleblow':328 'whonix':142,203,252,273 'wiki.archlinux.org':1020 'wiki.archlinux.org/index.php/udev#udev_rule_example).':1019 'window':2050,2056,2073,2155,2208,2235,2282 'wipe':1391 'wire':421 'within':1691 'without':34 'work':136,181,211,246,1731 'worker':333 'worst':816 'would':1712,1730 'written':1105 'www.buskill.in':50,88,399,407,2004,2017,2066,2081,2163,2228,2245,2301,2378,2449,2615,2617 'www.buskill.in/#demo)':406 'www.buskill.in/)':2616 'www.buskill.in/qubes-os/).':87 'www.buskill.in/wp-content/uploads/sites/8/2020/02/buskilldemo.mp4)](https://www.buskill.in/#demo)':398 'www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_buskill-armed1.png)](https://www.buskill.in/qubes-disarm/)':2448 'www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_buskill-disarmed1.png)](https://www.buskill.in/qubes-disarm/)':2377 'www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_featuredimage.jpg)](https://buskill.in/qubes-disarm)':49 'www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-add1.jpg.png)](https://www.buskill.in/qubes-disarm/)':2080 'www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-add2.png)](https://www.buskill.in/qubes-disarm/)':2162 'www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-add3.png)](https://www.buskill.in/qubes-disarm/)':2227 'www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-add4.png)](https://www.buskill.in/qubes-disarm/)':2244 'www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-added1.png)](https://www.buskill.in/qubes-disarm/)':2300 'www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings1.png)](https://www.buskill.in/qubes-disarm/)':2065 'www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_menu1.png)](https://buskill.in/qubes-disarm)':2003 'www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_menu2.png)](https://www.buskill.in/qubes-disarm/)':2016 'www.buskillvampfih2iucxhit3qp36i2zzql3u6pmkeafvlxs3tlmot5yad.onion':2620 'www.gnu.org':654 'www.gnu.org/licenses/gpl-3.0.html)':653 'www.qubes-os.org':207,853,864,884,1227 'www.qubes-os.org/doc/disposablevm/)':206 'www.qubes-os.org/doc/installation-guide/#initial-setup),':883 'www.qubes-os.org/doc/qrexec/#qubes-rpc-services),':1226 'www.qubes-os.org/doc/usb-devices/)':863 'www.qubes-os.org/doc/usb-qubes/)':852 'www.whonix.org':294 'www.whonix.org/wiki/qubes/disposablevm#warnings)--as':293 'x':1911 'xfce':1968 'y':1452 'year':2545 'youtube.com':413 'youtube.com/v/qpwyod_cqr4](https://www.youtube.com/v/qpwyod_cqr4)*':412 'ⓘ':105,1077"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1696362188
    +visibility: "visible             "
    +apId: "https://monero.town/post/703020"
    +editedAt: null
    +createdAt: DateTimeImmutable @1696353188 {#118
      date: 2023-10-03 19:13:08.0 +02:00
    }
  }
]

App\Twig\Components\BoostComponent {#3595
  +formDest: "entry"
  +subject: App\Entity\Entry {#1917
    +user: Proxies\__CG__\App\Entity\User {#1946
      +avatar: null
      +cover: null
      +email: "maltfield@monero.town"
      +username: "@maltfield@monero.town"
      +roles: []
      +followersCount: 0
      +homepage: "front"
      +about: """
        I make and sell [BusKill laptop kill cords](https://buskill.in). Monero is accepted.\n
        \n
        [michaelaltfield.net](https://michaelaltfield.net)
        """
      +lastActive: DateTime @1727484173 {#3155
        date: 2024-09-28 02:42:53.0 +02:00
      }
      +markedForDeletionAt: null
      +fields: null
      +oauthGithubId: null
      +oauthGoogleId: null
      +oauthFacebookId: null
      +oauthKeycloakId: null
      +hideAdult: true
      +showSubscribedUsers: true
      +showSubscribedMagazines: true
      +showSubscribedDomains: true
      +preferredLanguages: []
      +featuredMagazines: null
      +showProfileSubscriptions: false
      +showProfileFollowings: true
      +markNewComments: false
      +notifyOnNewEntry: false
      +notifyOnNewEntryReply: true
      +notifyOnNewEntryCommentReply: true
      +notifyOnNewPost: false
      +notifyOnNewPostReply: true
      +notifyOnNewPostCommentReply: true
      +addMentionsEntries: false
      +addMentionsPosts: true
      +isBanned: false
      +isVerified: false
      +isDeleted: false
      +isBot: false
      +spamProtection: true
      +customCss: null
      +ignoreMagazinesCustomCss: false
      +moderatorTokens: Doctrine\ORM\PersistentCollection {#3160 …}
      +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#3163 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#3165 …}
      +entries: Doctrine\ORM\PersistentCollection {#3167 …}
      +entryVotes: Doctrine\ORM\PersistentCollection {#3169 …}
      +entryComments: Doctrine\ORM\PersistentCollection {#3171 …}
      +entryCommentVotes: Doctrine\ORM\PersistentCollection {#3185 …}
      +posts: Doctrine\ORM\PersistentCollection {#3176 …}
      +postVotes: Doctrine\ORM\PersistentCollection {#3199 …}
      +postComments: Doctrine\ORM\PersistentCollection {#3220 …}
      +postCommentVotes: Doctrine\ORM\PersistentCollection {#3251 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#3208 …}
      +subscribedDomains: Doctrine\ORM\PersistentCollection {#3260 …}
      +follows: Doctrine\ORM\PersistentCollection {#3263 …}
      +followers: Doctrine\ORM\PersistentCollection {#3258 …}
      +blocks: Doctrine\ORM\PersistentCollection {#3286 …}
      +blockers: Doctrine\ORM\PersistentCollection {#3282 …}
      +blockedMagazines: Doctrine\ORM\PersistentCollection {#3299 …}
      +blockedDomains: Doctrine\ORM\PersistentCollection {#3303 …}
      +reports: Doctrine\ORM\PersistentCollection {#3287 …}
      +favourites: Doctrine\ORM\PersistentCollection {#3309 …}
      +violations: Doctrine\ORM\PersistentCollection {#3316 …}
      +notifications: Doctrine\ORM\PersistentCollection {#3318 …}
      +awards: Doctrine\ORM\PersistentCollection {#3310 …}
      +subscribedCategories: Doctrine\ORM\PersistentCollection {#3327 …}
      +categories: Doctrine\ORM\PersistentCollection {#3340 …}
      -id: 53233
      -password: "$2y$13$ONerzxs5ikSMZPP7JZz93.L7bi7bpix5PvgJJmsqWoSIfRo3rR8JO"
      -totpSecret: null
      -totpBackupCodes: []
      -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#3351 …}
      +apId: "maltfield@monero.town"
      +apProfileId: "https://monero.town/u/maltfield"
      +apPublicUrl: "https://monero.town/u/maltfield"
      +apFollowersUrl: null
      +apInboxUrl: "https://monero.town/inbox"
      +apDomain: "monero.town"
      +apPreferredUsername: "maltfield"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: false
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1711292170 {#3152
        date: 2024-03-24 15:56:10.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1696724832 {#3154
        date: 2023-10-08 02:27:12.0 +02:00
      }
      +__isInitialized__: true
       …2
    }
    +magazine: App\Entity\Magazine {#316
      +icon: null
      +name: "privacyguides@lemmy.one"
      +title: "privacyguides"
      +description: """
        *In the digital age, protecting your personal information might seem like an impossible task. We’re here to help.*\n
        \n
        This is a community for sharing news about privacy, posting information about cool privacy tools and services, and getting advice about your privacy journey.\n
        \n
        ---\n
        \n
        You can subscribe to this community from any Kbin or Lemmy instance:\n
        \n
        - [Subscribe on Kbin.social](https://kbin.social/m/privacyguides@lemmy.one)\n
        - [Subscribe on Lemmy.one](https://lemmy.one/c/privacyguides)\n
        - [Subscribe on Lemmy.ml](https://lemmy.ml/c/privacyguides@lemmy.one)\n
        - [Subscribe on Beehaw.org](https://beehaw.org/c/privacyguides@lemmy.one)\n
        \n
        [Learn more…](https://lemmy.one/post/355)\n
        \n
        ---\n
        \n
        Check out our website at [privacyguides.org](https://www.privacyguides.org) before asking your questions here. We’ve tried answering the common questions and recommendations there!\n
        \n
        Want to get involved? The website is [open-source on GitHub](https://github.com/privacyguides/privacyguides.org), and your help would be appreciated!\n
        \n
        ---\n
        \n
        **This community is the “official” Privacy Guides community on Lemmy, which can be [verified here](https://www.reddit.com/r/PrivacyGuides/comments/13x7oe3/who_wants_to_try_out_lemmy_privacyguideslemmyone/). Other “Privacy Guides” communities on other Lemmy servers are not moderated by this team or associated with the website.**\n
        \n
        ---\n
        \n
        **Moderation Rules:**\n
        \n
        1. We prefer posting about open-source software whenever possible.\n
        2. This is not the place for self-promotion if you are not listed on privacyguides.org. If you want to be listed, [make a suggestion on our forum first](https://discuss.privacyguides.net/c/site-development/suggestions/6).\n
        3. No soliciting engagement: Don’t ask for upvotes, follows, etc.\n
        4. Surveys, Fundraising, and Petitions must be **pre**-approved by the mod team.\n
        5. Be civil, no violence, hate speech. Assume people here are posting in good faith.\n
        6. Don’t repost topics which have already been covered here.\n
        7. News posts must be related to privacy and security, and **your post title must match the article headline exactly.** Do not editorialize titles, you can post your opinions in the post body or a comment.\n
        8. Memes/images/video posts that could be summarized as text explanations should not be posted. Infographics and conference talks from reputable sources are acceptable.\n
        9. **No help vampires:** This is not a tech support subreddit, don’t abuse our community’s willingness to help. Questions related to privacy, security or privacy/security related software and their configurations are acceptable.\n
        10. No misinformation: Extraordinary claims must be matched with **evidence.**\n
        11. Do not post about VPNs or cryptocurrencies which are not listed on [privacyguides.org](https://www.privacyguides.org/en/tools/). See Rule 2 for info on adding new recommendations to the website.\n
        12. General guides or software lists are not permitted. Original sources and research about specific topics are allowed as long as they are high quality and factual. **We are not providing a platform for poorly-vetted, out-of-date or conflicting recommendations.**\n
        \n
        ---\n
        \n
        Additional Resources:\n
        \n
        - [EFF: Surveillance Self-Defense](https://ssd.eff.org/)\n
        - [Consumer Reports Security Planner](https://securityplanner.consumerreports.org/)\n
        - [Jonah Aragon](https://www.jonaharagon.com) ([YouTube](https://youtube.com/@jonaharagon))\n
        - [r/Privacy](https://www.reddit.com/r/Privacy)\n
        - [Big Ass Data Broker Opt-Out List](https://github.com/yaelwrites/Big-Ass-Data-Broker-Opt-Out-List)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 259
      +entryCommentCount: 2490
      +postCount: 5
      +postCommentCount: 29
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729537882 {#324
        date: 2024-10-21 21:11:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#304 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#300 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#289 …}
      +entries: Doctrine\ORM\PersistentCollection {#247 …}
      +posts: Doctrine\ORM\PersistentCollection {#205 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#267 …}
      +bans: Doctrine\ORM\PersistentCollection {#184 …}
      +reports: Doctrine\ORM\PersistentCollection {#170 …}
      +badges: Doctrine\ORM\PersistentCollection {#148 …}
      +logs: Doctrine\ORM\PersistentCollection {#138 …}
      +awards: Doctrine\ORM\PersistentCollection {#127 …}
      +categories: Doctrine\ORM\PersistentCollection {#114 …}
      -id: 39
      +apId: "privacyguides@lemmy.one"
      +apProfileId: "https://lemmy.one/c/privacyguides"
      +apPublicUrl: "https://lemmy.one/c/privacyguides"
      +apFollowersUrl: "https://lemmy.one/c/privacyguides/followers"
      +apInboxUrl: "https://lemmy.one/inbox"
      +apDomain: "lemmy.one"
      +apPreferredUsername: "privacyguides"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729576084 {#325
        date: 2024-10-22 07:48:04.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1696630878 {#319
        date: 2023-10-07 00:21:18.0 +02:00
      }
    }
    +image: Proxies\__CG__\App\Entity\Image {#2412 …}
    +domain: Proxies\__CG__\App\Entity\Domain {#1794 …}
    +slug: "QubesOS-Disarm-BusKill-Dead-Man-Switch-with-Keyboard-Shortcut-Guide"
    +title: "[QubesOS] Disarm BusKill Dead Man Switch with Keyboard Shortcut (Guide)"
    +url: "https://www.buskill.in/qubes-disarm/"
    +body: """
      This article describes how to setup keyboard shortcuts in QubesOS so that you can temporarily disarm (pause) the BusKill laptop kill cord.\n
      \n
      This allows the user to, for example, go to the bathroom without causing their computer to shutdown or self-destruct.\n
      \n
      [![Arm  Disarm BusKill in QubesOS](https://www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_featuredImage.jpg)](https://buskill.in/qubes-disarm)\n
      \n
      This is a guide that builds on part one: [A Laptop Kill Cord for QubesOS (1/2)](/qubes-os/). Before reading this, you should already be familiar with how to [setup udev rules for BusKill on QubesOS](https://www.buskill.in/qubes-os/).\n
      \n
      1. [A Laptop Kill Cord for QubesOS (1/2)](/qubes-os/)\n
      2. Disarm BusKill in QubesOS (2/2)\n
      \n
      > ⓘ Note: This post is adapted from its original [article on Tom Hocker's blog](https://humandecoded.io/qubes-os-yubikey-buskill/).\n
      \n
      What is BusKill?\n
      ================\n
      \n
      > What if someone literally steals your laptop while you're working with classified information inside a Whonix DispVM? They'd also be able to recover data from previous DispVMs--as Disposable VM's rootfs virtual files are *not* securely shredded after your DispVM is destroyed.\n
      \n
      Are you a security researcher, journalist, or intelligence operative that works in QubesOS--exploiting Qubes' [brilliant security-through-compartimentalization](https://freedom.press/news/the-operating-system-that-can-protect-you-even-if-you-get-hacked/)to keep your data safe? Do you make use of Whonix [Disposable VMs](https://www.qubes-os.org/doc/disposablevm/) for your work? Great! This post is for you.\n
      \n
      I'm sure your QubesOS laptop has Full Disk Encryption and you're using a strong passphrase. But what if someone literally steals your laptop while you're working with classified information inside a Whonix DispVM? Not only will they get access to all of your AppVM's private data and the currently-running Whonix DispVM's data, but there's a high chance they'd be able to recover data from [previous DispVMs](https://www.whonix.org/wiki/Qubes/DisposableVM#Warnings)--as **Disposable VM's rootfs virtual files ([volatile.img](https://groups.google.com/forum/#!topic/qubes-devel/QwL5PjqPs-4/discussion)) are [*not* securely shredded](https://github.com/QubesOS/qubes-issues/issues/904) after your DispVM is destroyed** by Qubes!\n
      \n
      Let's say you're a journalist, activist, whistleblower, or a human rights worker in an oppressive regime. Or an intelligence operative behind enemy lines doing research or preparing a top-secret document behind a locked door. What do you do to protect your data, sources, or assets when the secret police suddenly batter down your door? How quickly can you *actually* act to shutdown your laptop and shred your RAM and/or FDE encryption keys?\n
      \n
      | [![BusKill Demo](https://www.buskill.in/wp-content/uploads/sites/8/2020/02/busKillDemo.mp4)](https://www.buskill.in/#demo) |\n
      |---|\n
      | *Watch the [BusKill Explainer Video](https://www.buskill.in/#demo) for more info [youtube.com/v/qPwyoD_cQR4](https://www.youtube.com/v/qPwyoD_cQR4)* |\n
      \n
      BusKill utilizes a magnetic trip-wire that tethers your body to your laptop. If you suddenly jump to your feet or fall off your chair (in response to the battering ram crashing through your door) or your laptop is ripped off your table by a group of armed thugs, the data bus' magnetic connection will be severed. This event causes a configurable *trigger* to execute.\n
      \n
      The BusKill `trigger` can be anything from:\n
      \n
      1. locking your screen or\n
      2. shutting down the computer or\n
      3. initiating a [self-destruct](/luks-self-destruct/) sequence\n
      \n
      While our [last post](qubes-os) described how to setup such a system in QubesOS with BusKill, *this* post will describe how to add keyboard shortcuts to arm & disarm the dead man switch (eg so you can go to the bathroom).\n
      \n
      Disclaimer\n
      ==========\n
      \n
      This guide contains experimental files, commands, and software. The information contained in this article may or may not lead to corruption or total permanent deletion of some or all of your data. We've done our best to carefully guide the user so they know the risks of each BusKill trigger, but we cannot be responsible for any data loss that has occurred as a result of following this guide.\n
      \n
      The contents of this guide is provided openly and is licensed under the [CC-BY-SA](https://creativecommons.org/licenses/by-sa/4.0/) license. The software included in this guide is licensed under the [GNU GPLv3](https://www.gnu.org/licenses/gpl-3.0.html) license. All content here is consistent with the limitations of liabilities outlined in its respective licenses.\n
      \n
      We highly recommend that any experiments with the scripts included in this article are used exclusively on a disposable machine containing no valuable data.\n
      \n
      If data loss is a concern for you, then leave now and do not proceed with following this guide. You have been warned.\n
      \n
      Release Note\n
      ------------\n
      \n
      Also be aware that, due to the risks outlined above, BusKill will *not*be released with this "self-destruct" trigger.\n
      \n
      If you [purchase](/buy)a BusKill cable, it will only ship with non-destructive triggers that lock the screen or shutdown the computer. Advanced users can follow guides to add additional destructive triggers, such as the one described in this post, but they should do so at their own risk--taking carefully into consideration all of the warnings outlined above and throughout this article.\n
      \n
      **Again, if you [buy](/buy) a BusKill cable, the worst that can happen is your computer will abruptly shutdown.**\n
      \n
      Assumptions\n
      ===========\n
      \n
      This guide necessarily makes several assumptions outlined below.\n
      \n
      sys-usb\n
      -------\n
      \n
      In this guide, we assume that your QubesOS install has a [USB-Qube](https://www.qubes-os.org/doc/usb-qubes/) named '`sys-usb`' for handling [USB events](https://www.qubes-os.org/doc/usb-devices/) on behalf of `dom0`.\n
      \n
      If you decided to combine your USB and networking Qubes at [install time](https://www.qubes-os.org/doc/installation-guide/#initial-setup), then replace all references in this guide for '`sys-usb`' to '`sys-net`'.\n
      \n
      If you decided to run your '`sys-usb`' VM as a DispoableVM at [install time](https://github.com/QubesOS/qubes-issues/issues/6684#issuecomment-1435381919), then replace all references in this guide for '`sys-usb`' its Disposable TemplateVM (eg '`fedora-36-dvm`').\n
      \n
      …And if you chose not to isolate your USB devices, then [may god help you](https://blog.invisiblethings.org/2011/05/31/usb-security-challenges.html).\n
      \n
      Udev Device Matching\n
      --------------------\n
      \n
      BusKill in Linux uses [udev](https://en.wikipedia.org/wiki/Udev) to detect when the USB's cable is severed. The exact udev rule that you use in the files below will depend on the drive you choose to use in your BusKill cable.\n
      \n
      In this guide, we identify our BusKill-specific drive with the '`ENV{ID_MODEL}==“Micromax_A74”`' [udev property](https://wiki.archlinux.org/index.php/Udev#udev_rule_example). You should replace this property with one that matches your BusKill-specific drive.\n
      \n
      To determine how to query your USB drive for device-specific identifiers, see [Introducing BusKill: A Kill Cord for your Laptop](/buskill-laptop-kill-cord-dead-man-switch/#software). Note that the ``udevadm monitor --environment --udev`` command should be run in the '`sys-usb`' Qube.\n
      \n
      > ⓘ Note: If you'd prefer to buy a BusKill cable than make your own, you can buy one fully assembled [here](/buy).\n
      \n
      QubesOS Version\n
      ---------------\n
      \n
      This guide was written for QubesOS v4.1.\n
      \n
      ```\n
      \n
      <span style="color:#323232;">[user@dom0 ~]$ cat /etc/redhat-release Qubes release 4.1.2 (R4.1)\n
      </span><span style="color:#323232;">[user@dom0 ~]$\n
      </span>\n
      ```\n
      \n
      BusKill Files\n
      =============\n
      \n
      This section will describe what files should be created and where.\n
      \n
      Due to the design of QubesOS, it takes a bit of mental gymnastics to understand what we're doing and why. It's important to keep in mind that, in QubesOS\n
      \n
      1. The keyboard and UI are configured in '`dom0’`\n
      2. USB devices (like the BusKill device) are routed to the '`sys-usb`' VM\n
      3. dom0 has the privilege to execute scripts inside other VMs (eg '`sys-usb`')\n
      4. By design, VMs should *not* be able to send arbitrary commands to be executed in dom0\n
      5. .…but via the [qubes-rpc](https://www.qubes-os.org/doc/qrexec/#qubes-rpc-services), we *can* permit some VMs (eg '`sys-usb`') to execute a script in dom0 (though for security reasons, ideally such that no data/input is sent from the less-trusted VM to dom0 -- other than the name of the script)\n
      \n
      Due to the constraints listed above:\n
      \n
      1. We'll be configuring the disarm button as keyboard shortcut in dom0\n
      2. We'll be saving and executing the '`buskill-disarm.sh`' script in '`sys-usb`' (because these scripts manipulate our udev rules)\n
      3. The keyboard shortcut in dom0 will *actually* be executing the above script in '`sys-usb`'\n
      \n
      sys-usb\n
      -------\n
      \n
      If you followed our [previous guide to setting-up BusKill in QubesOS](/qubes-os/), then you should already have a file in '`sys-usb`' at '`/rw/config/buskill.rules`'. You may even have modified it to trigger a [LUKS Self-Destruct](/luks-self-destruct/) on removal of your BusKill device.\n
      \n
      Because you're *now* experimenting with a new setup, let's go ahead and wipe out that old file with a new one that *just* executes a soft-shutdown. You might need some days to get used to the new disarm procedure, and you probably don't want to suddenly loose all your data due to an accidental false-positive!\n
      \n
      Execute the following on your '`sys-usb`' Qube:\n
      \n
      ```\n
      \n
      <span style="color:#323232;">mv /rw/config/buskill.rules /rw/config/buskill.rules.bak.`date "+%Y%m%d_%H%M%S"`\n
      </span><span style="color:#323232;">cat &lt;&lt; EOF | sudo tee /rw/config/buskill.rules\n
      </span><span style="color:#323232;">################################################################################\n
      </span><span style="color:#323232;"># File:    sys-usb:/etc/udev/rules.d/buskill.rules -> /rw/config/buskill.rules\n
      </span><span style="color:#323232;"># Purpose: Add buskill rules. For more info, see: https://buskill.in/qubes-os/\n
      </span><span style="color:#323232;"># Authors: Michael Altfield \n
      </span><span style="color:#323232;"># Created: 2020-01-02\n
      </span><span style="color:#323232;"># License: GNU GPLv3\n
      </span><span style="color:#323232;">################################################################################\n
      </span><span style="color:#323232;">ACTION=="remove", SUBSYSTEM=="usb", ENV{ID_MODEL}=="Micromax_A74", RUN+="/usr/bin/qrexec-client-vm dom0 buskill.softShutdown"\n
      </span><span style="color:#323232;">EOF\n
      </span><span style="color:#323232;">sudo ln -s /rw/config/buskill.rules /etc/udev/rules.d/\n
      </span><span style="color:#323232;">sudo udevadm control --reload\n
      </span>\n
      ```\n
      \n
      Now, let's add a new udev '`.rules`' file. This one will always *just* lock your screen, and it's what will be put in-place when BusKill is "disarmed".\n
      \n
      Execute the following on your '`sys-usb`' Qube:\n
      \n
      ```\n
      \n
      <span style="color:#323232;">cat &lt;&lt; EOF | sudo tee /rw/config/buskill.lock.rules\n
      </span><span style="color:#323232;">################################################################################\n
      </span><span style="color:#323232;"># File:    sys-usb:/etc/udev/rules.d/buskill.rules -> /rw/config/buskill.lock.rules\n
      </span><span style="color:#323232;"># Purpose: Just lock the screen. For more info, see: https://buskill.in/qubes-os/\n
      </span><span style="color:#323232;"># Authors: Michael Altfield \n
      </span><span style="color:#323232;"># Created: 2023-05-10\n
      </span><span style="color:#323232;"># License: GNU GPLv3\n
      </span><span style="color:#323232;">################################################################################\n
      </span><span style="color:#323232;">ACTION=="remove", SUBSYSTEM=="usb", ENV{ID_MODEL}=="Micromax_A74", RUN+="/usr/bin/qrexec-client-vm dom0 buskill.lock"\n
      </span><span style="color:#323232;">EOF\n
      </span>\n
      ```\n
      \n
      The careful reader will see that we're not *actually* disarming BusKill in the same sense as our [BusKill GUI app](https://github.com/buskill/buskill-app/). Indeed, what we're *actually* going to do is swap these two files for 30 seconds.\n
      \n
      This way, if BusKill is armed and you remove the cable, your computer shuts-down.\n
      \n
      But if you want to disarm, the procedure becomes:\n
      \n
      1. Hit the "Disarm BusKill" keyboard shortcut (see below)\n
      2. Wait for the toast popup message indicating that BusKill is now disarmed\n
      3. Remove the cable within 30 seconds\n
      4. Your screen locks (instead of shutting down)\n
      \n
      Personally, I can't think of a QubesOS user that would want to leave their machine unlocked when they go to the bathroom, so I figured this approach would work better than an *actual* disarm.\n
      \n
      Bonus: when you return from your break, just plug-in the BusKill cable in, and it'll already be armed (reducing the risk of user error due to forgetting to arm BusKill).\n
      \n
      Now, let's add the actual '`buskill-disarm.sh`' script to disarm BusKill:\n
      \n
      Execute the following on your '`sys-usb`' Qube:\n
      \n
      ```\n
      \n
      <span style="color:#323232;">cat &lt;&lt; EOF | sudo tee /usr/local/bin/buskill-disarm.sh\n
      </span><span style="color:#323232;">#!/bin/bash\n
      </span><span style="color:#323232;"> \n
      </span><span style="color:#323232;">################################################################################\n
      </span><span style="color:#323232;"># File:    sys-usb:/usr/local/bin/buskill-disarm.sh\n
      </span><span style="color:#323232;"># Purpose: Temp disarm BusKill. For more info, see: https://buskill.in/qubes-os/\n
      </span><span style="color:#323232;"># Authors: Tom \n
      </span><span style="color:#323232;"># Co-Auth: Michael Altfield \n
      </span><span style="color:#323232;"># Created: 2023-05-10\n
      </span><span style="color:#323232;"># License: GNU GPLv3\n
      </span><span style="color:#323232;">################################################################################\n
      </span><span style="color:#323232;"> \n
      </span><span style="color:#323232;"># replace the 'shutdown' trigger with the 'lock' trigger\n
      </span><span style="color:#323232;">sudo rm /etc/udev/rules.d/buskill.rules\n
      </span><span style="color:#323232;">sudo ln -s /rw/config/buskill.lock.rules /etc/udev/rules.d/buskill.rules\n
      </span><span style="color:#323232;">sudo udevadm control --reload\n
      </span><span style="color:#323232;"> \n
      </span><span style="color:#323232;"># let the user know that BusKill is now temporarily disarmed\n
      </span><span style="color:#323232;">notify-send -t 21000 "BusKill" "Disarmed for 30 seconds" -i changes-allow\n
      </span><span style="color:#323232;"> \n
      </span><span style="color:#323232;"># wait 30 seconds\n
      </span><span style="color:#323232;">sleep 30\n
      </span><span style="color:#323232;"> \n
      </span><span style="color:#323232;"># replace the 'lock' trigger with the 'shutdown' trigger\n
      </span><span style="color:#323232;">sudo rm /etc/udev/rules.d/buskill.rules\n
      </span><span style="color:#323232;">sudo ln -s /rw/config/buskill.rules /etc/udev/rules.d/buskill.rules\n
      </span><span style="color:#323232;">sudo udevadm control --reload\n
      </span><span style="color:#323232;">notify-send -t 5000 "BusKill" "BusKill is Armed" -i changes-prevent\n
      </span><span style="color:#323232;">EOF\n
      </span><span style="color:#323232;">sudo chmod +x /usr/local/bin/buskill-disarm.sh\n
      </span>\n
      ```\n
      \n
      dom0\n
      ----\n
      \n
      If you followed our [previous guide to setting-up BusKill in QubesOS](/qubes-os/), then you shouldn't need to add any files to dom0. What you *do* need to do is setup some keyboard shortcuts.\n
      \n
      In the QubesOS GUI, click on the big `Q` "Start Menu" in the top-left of your XFCE panel to open the Applications menu. Navigate to '`System Tools`' and click Keyboard\n
      \n
      | [![Screenshot of QubesOS with an arrow pointing to the “Q” Application Menu in the very top-left of the screen](https://www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_menu1.png)](https://buskill.in/qubes-disarm) | [![Screenshot of QubesOS Application Menu with “System Tools -> Keyboard” highlighted](https://www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_menu2.png)](https://www.buskill.in/qubes-disarm/) |\n
      |---|---|\n
      | Click the “Q” to open the QubesOS Application Menu | Click System Tools -&gt; Keyboard |\n
      \n
      Click the '`Application Shortcuts`' Tab and then click the '`+ Add`' button on the bottom-left of the window.\n
      \n
      | [![Screenshot of QubesOS Keyboard Settings Window that shows the “Application Shortcuts” tab highlighted’alt](https://www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings1.png)](https://www.buskill.in/qubes-disarm/) | [![Screenshot of QubesOS Keyboard Settings Window that shows the “+ Add” button highlightedalt](https://www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-add1.jpg.png)](https://www.buskill.in/qubes-disarm/) |\n
      |---|---|\n
      | Click the “Application Shortcuts” tab to add a Keyboard Shortcut in Qubes | Click the “Add” Button to add a new Keyboard Shortcut in Qubes |\n
      \n
      In the '`Command`' input field, type the following\n
      \n
      ```\n
      \n
      <span style="color:#323232;">qvm-run sys-usb buskill-disarm.sh\n
      </span>\n
      ```\n
      \n
      The above command will execute a command in '`dom0`' that will execute a command in '`sys-usb`' that will execute the '`buskill-disarm.sh`' script that we created above.\n
      \n
      | [![Screenshot of QubesOS Keyboard Settings Window that shows the OK button highlighted](https://www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-add2.png)](https://www.buskill.in/qubes-disarm/) |\n
      |---|\n
      | After typing the command to be executed when the keyboard shortcut is pressed, click the "OK" button |\n
      \n
      Now click "OK" and, when prompted, type Ctrl+Shift+D (or whatever keyboard shortcut you want to bind to "Disarming BusKill").\n
      \n
      | [![Screenshot of QubesOS Keyboard Settings Window that shows the prompt "Press now the keyboard keys you want to use to trigger the command…"alt](https://www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-add3.png)](https://www.buskill.in/qubes-disarm/) | [![Screenshot of QubesOS Keyboard Settings Window that shows the selected Shortcut "Shift+Ctrl+D"](https://www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-add4.png)](https://www.buskill.in/qubes-disarm/) |\n
      |---|---|\n
      | Type “Ctrl+Shift+D” or whatever keyboard shortcut you want to trigger BusKill to be disarmed for 30 seconds |  |\n
      \n
      You should now have a keyboard shortcut binding for disarming BusKill!\n
      \n
      [![Screenshot of QubesOS\n
      Keyboard Settings Window that shows the newly created keyboard shortcut\n
      for Shift+Ctrl+D at the top of the\n
      list](https://www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-added1.png)](https://www.buskill.in/qubes-disarm/)\n
      \n
      Test It!\n
      ========\n
      \n
      At this point, you can test your new (temporary) BusKill Disarm functionality by:\n
      \n
      1. Plugging-in your BusKill cable\n
      2. Typing Ctrl+Shift+D\n
      3. Waiting for the toast popup message to appear indicating that BusKill is disarmed for 30 seconds\n
      4. Unplugging your BusKill cable\n
      \n
      Your machine should lock, not shutdown.\n
      \n
      | [![Screenshot of QubesOS with a toast message in the top-right that says BusKill Disarmed for 30 Seconds](https://www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_buskill-disarmed1.png)](https://www.buskill.in/qubes-disarm/) |\n
      |---|\n
      | After hitting the keyboard shortcut to disarm BusKill, you have 30 seconds to remove the cable |\n
      \n
      After 30 seconds, return to your computer and test the normal "arm" functionality:\n
      \n
      1. Plug-in your BusKill cable\n
      2. Unlock your screen\n
      3. Unplug your BusKill cable\n
      \n
      Your computer should shutdown, not lock.\n
      \n
      | [![Screenshot of QubesOS with a toast message in the top-right that says BusKill is Armed](https://www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_buskill-armed1.png)](https://www.buskill.in/qubes-disarm/) |\n
      |---|\n
      | 30 seconds after hitting the keyboard shortcut, BusKill will arm itself |\n
      \n
      Troubleshooting\n
      ===============\n
      \n
      Is unplugging your USB device doing nothing? Having other issues?\n
      \n
      See the [Troubleshooting section](https://buskill.in/qubes-os/#troubleshooting) in our original guide to using BusKill on QubesOS.\n
      \n
      Limitations/Improvements\n
      ========================\n
      \n
      Security is porous. All software has bugs. Nothing is 100% secure. For more limitations to using BusKill on QubesOS, see the [Limitations section](https://busill.in/qubes-os/#limitations) in our original guide to using BusKill on QubesOS.\n
      \n
      Buy a BusKill Cable\n
      ===================\n
      \n
      We look forward to continuing to improve the BusKill software and making BusKill more accessible this year. If you want to help, [please consider purchasing a BusKill cable](https://buskill.in/buy) for yourself or a loved one. It helps us fund further development, and you get your own BusKill cable to keep you or your loved ones safe.\n
      \n
      You can also buy a BusKill cable with bitcoin, monero, and other altcoins from our [BusKill Store’s .onion site](http://buskillvampfih2iucxhit3qp36i2zzql3u6pmkeafvlxs3tlmot5yad.onion/buy/).\n
      \n
      Stay safe,  \n
      The BusKill Team  \n
      [www.buskill.in](https://www.buskill.in/)  \n
      [buskillvampfih2iucxhit3qp36i2zzql3u6pmkeafvlxs3tl…](http://www.buskillvampfih2iucxhit3qp36i2zzql3u6pmkeafvlxs3tlmot5yad.onion)
      """
    +type: "link"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 0
    +favouriteCount: 4
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1696353188 {#1870
      date: 2023-10-03 19:13:08.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1843 …}
    +votes: Doctrine\ORM\PersistentCollection {#1879 …}
    +reports: Doctrine\ORM\PersistentCollection {#1885 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1395 …}
    +notifications: Doctrine\ORM\PersistentCollection {#1890 …}
    +badges: Doctrine\ORM\PersistentCollection {#1935 …}
    +children: []
    -id: 3502
    -titleTs: "'buskil':3 'dead':4 'disarm':2 'guid':10 'keyboard':8 'man':5 'qubeso':1 'shortcut':9 'switch':6"
    -bodyTs: "'-01':1485 '-02':1486 '-05':1581,1821 '-10':1582,1822 '-36':936 '/#demo)':408 '/)':2618 '/2011/05/31/usb-security-challenges.html).':955 '/bin/bash':1795 '/buskill-laptop-kill-cord-dead-man-switch':1058 '/buskill/buskill-app/).':1623 '/buy':745,811,1099 '/buy)':2559 '/buy/).':2609 '/doc/disposablevm/)':208 '/doc/installation-guide/#initial-setup),':885 '/doc/qrexec/#qubes-rpc-services),':1228 '/doc/usb-devices/)':865 '/doc/usb-qubes/)':854 '/etc/redhat-release':1112 '/etc/udev/rules.d':1508 '/etc/udev/rules.d/buskill.rules':1467,1562,1836,1841,1885,1890 '/forum/#!topic/qubes-devel/qwl5pjqps-4/discussion))':305 '/index.php/udev#udev_rule_example).':1021 '/licenses/by-sa/4.0/)':639 '/licenses/gpl-3.0.html)':655 '/luks-self-destruct':505,1370 '/news/the-operating-system-that-can-protect-you-even-if-you-get-hacked/)to':193 '/qubes-os':68,98,1343,1927 '/qubes-os-yubikey-buskill/).':122 '/qubes-os/':1479,1575,1811 '/qubes-os/#limitations)':2515 '/qubes-os/#troubleshooting)':2479 '/qubes-os/).':89 '/qubesos/qubes-issues/issues/6684#issuecomment-1435381919),':919 '/qubesos/qubes-issues/issues/904)':312 '/rw/config/buskill.lock.rules':1557,1563,1840 '/rw/config/buskill.rules':1356,1449,1462,1468,1507,1889 '/rw/config/buskill.rules.bak':1450 '/usr/bin/qrexec-client-vm':1500,1596 '/usr/local/bin/buskill-disarm.sh':1794,1800,1912 '/v/qpwyod_cqr4](https://www.youtube.com/v/qpwyod_cqr4)*':414 '/wiki/qubes/disposablevm#warnings)--as':295 '/wiki/udev)':966 '/wp-content/uploads/sites/8/2020/02/buskilldemo.mp4)](https://www.buskill.in/#demo)':400 '/wp-content/uploads/sites/8/qubes-disarm_buskill-armed1.png)](https://www.buskill.in/qubes-disarm/)':2450 '/wp-content/uploads/sites/8/qubes-disarm_buskill-disarmed1.png)](https://www.buskill.in/qubes-disarm/)':2379 '/wp-content/uploads/sites/8/qubes-disarm_featuredimage.jpg)](https://buskill.in/qubes-disarm)':51 '/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-add1.jpg.png)](https://www.buskill.in/qubes-disarm/)':2082 '/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-add2.png)](https://www.buskill.in/qubes-disarm/)':2164 '/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-add3.png)](https://www.buskill.in/qubes-disarm/)':2229 '/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-add4.png)](https://www.buskill.in/qubes-disarm/)':2246 '/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-added1.png)](https://www.buskill.in/qubes-disarm/)':2302 '/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings1.png)](https://www.buskill.in/qubes-disarm/)':2067 '/wp-content/uploads/sites/8/qubes-disarm_menu1.png)](https://buskill.in/qubes-disarm)':2005 '/wp-content/uploads/sites/8/qubes-disarm_menu2.png)](https://www.buskill.in/qubes-disarm/)':2018 '1':90,488,1163,1276,1665,2318,2409 '1/2':67,97 '100':2499 '2':99,493,1172,1289,1674,2325,2416 '2/2':104 '2020':1484 '2023':1580,1820 '21000':1860 '3':499,1187,1310,1687,2330,2420 '30':1638,1692,1864,1871,1874,2264,2345,2375,2390,2397,2451 '4':1202,1694,2347 '4.1.2':1115 '5':1219 '5000':1899 'a74':1016,1498,1594 'abl':148,286,1209 'abrupt':824 'access':259,2543 'accident':1435 'act':383 'action':1490,1586 'activist':327 'actual':382,1317,1609,1628,1735,1775 'adapt':110 'add':531,772,1470,1516,1773,1934,2041,2077,2089,2097,2100 'addit':773 'advanc':766 'ahead':1389 'allow':24,1869 'alreadi':74,1347,1755 'also':146,721,2589 'alt':2064,2226 'altcoin':2599 'altfield':1482,1578,1818 'alway':1525 'and/or':392 'anyth':486 'app':1620 'appear':2338 'applic':1973,1992,2009,2026,2034,2060,2085 'approach':1729 'appvm':264 'arbitrari':1212 'arm':44,463,535,1645,1757,1768,1903,2407,2447,2460 'arrow':1987 'articl':2,114,563,684,806 'assembl':1097 'asset':368 'assum':842 'assumpt':826,832 'auth':1816 'author':1480,1576,1812 'awar':723 'bathroom':33,548,1724 'batter':374,445 'becom':1664 'behalf':867 'behind':342,354 'best':586 'better':1732 'big':1957 'bind':2199,2273 'bit':1141 'bitcoin':2595 'blog':119 'blog.invisiblethings.org':954 'blog.invisiblethings.org/2011/05/31/usb-security-challenges.html).':953 'bodi':425 'bonus':1737 'bottom':2046 'bottom-left':2045 'break':1743 'brilliant':186 'bug':2496 'build':57 'bus':467 'busill.in':2514 'busill.in/qubes-os/#limitations)':2513 'buskil':19,46,84,101,125,396,403,415,482,524,599,731,747,813,959,998,1007,1033,1051,1086,1119,1177,1340,1375,1471,1541,1611,1618,1643,1669,1683,1749,1769,1780,1804,1851,1861,1900,1901,1924,2202,2259,2276,2314,2323,2341,2350,2372,2387,2414,2423,2445,2458,2486,2506,2522,2527,2537,2541,2555,2577,2592,2602,2613 'buskill-disarm.sh':1297,1776,2121,2144 'buskill-specif':1006,1032 'buskill.in':1478,1574,1810,2478,2558 'buskill.in/buy)':2557 'buskill.in/qubes-os/':1477,1573,1809 'buskill.in/qubes-os/#troubleshooting)':2477 'buskill.lock':1598 'buskill.softshutdown':1502 'buskillvampfih2iucxhit3qp36i2zzql3u6pmkeafvlxs3tl':2619 'buskillvampfih2iucxhit3qp36i2zzql3u6pmkeafvlxs3tlmot5yad.onion':2608 'buskillvampfih2iucxhit3qp36i2zzql3u6pmkeafvlxs3tlmot5yad.onion/buy/).':2607 'button':1283,2042,2078,2098,2160,2181 'buy':810,1084,1094,2525,2590 'cabl':748,814,973,999,1087,1650,1690,1750,2324,2351,2395,2415,2424,2528,2556,2578,2593 'cannot':603 'care':588,794,1601 'cat':1111,1458,1553,1790 'caus':35,475 'cc':634 'cc-by-sa':633 'chair':440 'chanc':282 'chang':1868,1906 'changes-allow':1867 'changes-prev':1905 'chmod':1910 'choos':993 'chose':941 'classifi':138,248 'click':1954,1980,2019,2028,2032,2039,2083,2095,2178,2183 'co':1815 'co-auth':1814 'combin':874 'command':555,1067,1213,2109,2124,2128,2135,2168,2225 'compartiment':190 'comput':37,497,765,822,1652,2402,2426 'concern':701 'configur':477,1169,1280 'connect':469 'consid':2552 'consider':796 'consist':661 'constraint':1273 'contain':552,560,692 'content':621,658 'continu':2533 'control':1511,1844,1893 'cord':22,64,94,1054 'corrupt':570 'crash':447 'creat':1129,1483,1579,1819,2148,2287 'creativecommons.org':638 'creativecommons.org/licenses/by-sa/4.0/)':637 'ctrl':2189,2242,2248,2292,2327 'current':271 'currently-run':270 'd':145,284,1081,1454,2191,2243,2250,2293,2329 'data':151,196,267,276,289,365,466,581,608,695,697,1431 'data/input':1252 'date':1451 'day':1411 'dead':538 'decid':872,903 'delet':574 'demo':397 'depend':988 'describ':3,514,528,780,1124 'design':1135,1204 'destroy':170,317 'destruct':43,504,740,756,774,1369 'detect':968 'determin':1037 'develop':2571 'devic':947,957,1046,1174,1178,1376,2467 'device-specif':1045 'disarm':16,45,100,536,1282,1418,1543,1610,1661,1668,1686,1736,1779,1803,1855,1862,2201,2262,2275,2315,2343,2373,2386 'disclaim':549 'disk':226 'dispoablevm':913 'dispos':156,204,296,690,932 'dispvm':143,154,168,253,274,292,315 'document':353 'dom0':869,1110,1118,1171,1188,1218,1243,1262,1288,1315,1501,1597,1913,1938,2130 'done':584 'door':357,377,450 'drive':991,1009,1035,1043 'due':725,1132,1270,1432,1764 'dvm':937 'eg':541,934,1198,1234 'en.wikipedia.org':965 'en.wikipedia.org/wiki/udev)':964 'encrypt':227,394 'enemi':343 'env':1012,1494,1590 'environ':1065 'eof':1459,1503,1554,1599,1791,1908 'error':1763 'even':1359 'event':474,862 'exact':977 'exampl':29 'exclus':687 'execut':480,1193,1216,1239,1295,1319,1402,1439,1544,1781,2126,2133,2142,2171 'experi':677,1381 'experiment':553 'explain':404 'exploit':184 'fall':437 'fals':1437 'false-posit':1436 'familiar':76 'fde':393 'fedora':935 'feet':435 'field':2111 'figur':1727 'file':161,301,554,985,1120,1126,1350,1395,1463,1521,1558,1636,1796,1936 'follow':617,712,769,1332,1441,1546,1783,1916,2114 'forget':1766 'forward':2531 'freedom.press':192 'freedom.press/news/the-operating-system-that-can-protect-you-even-if-you-get-hacked/)to':191 'full':225 'fulli':1096 'function':2316,2408 'fund':2569 'get':258,1413,2574 'github.com':311,918,1622 'github.com/buskill/buskill-app/).':1621 'github.com/qubesos/qubes-issues/issues/6684#issuecomment-1435381919),':917 'github.com/qubesos/qubes-issues/issues/904)':310 'gnu':651,1488,1584,1824 'go':30,545,1388,1629,1721 'god':950 'gplv3':652,1489,1585,1825 'great':212 'group':461 'groups.google.com':304 'groups.google.com/forum/#!topic/qubes-devel/qwl5pjqps-4/discussion))':303 'gui':1619,1953 'guid':55,551,589,619,624,646,714,770,828,840,892,926,1002,1103,1335,1919,2483,2519 'gymnast':1144 'h':1455 'handl':860 'happen':819 'help':951,2550,2567 'high':281,673 'highlight':2015,2063,2161 'highlightedalt':2079 'hit':1666,2381,2454 'hocker':117 'human':331 'humandecoded.io':121 'humandecoded.io/qubes-os-yubikey-buskill/).':120 'id':1013,1495,1591 'ideal':1248 'identifi':1004,1048 'import':1155 'improv':2535 'in-plac':1537 'includ':643,681 'inde':1624 'indic':1681,2339 'info':411,1475,1571,1807 'inform':139,249,559 'initi':500 'input':2110 'insid':140,250,1195 'instal':846,881,915 'instead':1698 'intellig':178,340 'introduc':1050 'isol':944 'issu':2472 'journalist':176,326 'jump':432 'keep':194,1157,2580 'key':395,2217 'keyboard':7,532,1165,1285,1312,1670,1948,1981,2014,2031,2054,2071,2091,2103,2153,2174,2194,2206,2216,2233,2253,2271,2280,2288,2383,2456 'kill':21,63,93,1053 'know':594,1849 'laptop':20,62,92,132,223,242,387,428,453,1057 'last':509 'lead':568 'leav':705,1715 'left':1965,1999,2047 'less':1258 'less-trust':1257 'let':320,1386,1514,1771,1846 'liabil':666 'licens':630,640,648,656,671,1487,1583,1823 'like':1175 'limit':664,2503,2511 'limitations/improvements':2489 'line':344 'linux':961 'list':1274,2299 'liter':129,239 'll':1278,1291,1754 'ln':1505,1838,1887 'lock':356,489,759,1527,1566,1697,1832,1877,2355,2430 'look':2530 'loos':1428 'loss':609,698 'love':2564,2584 'luk':1366 'm':219,1453,1456 'machin':691,1717,2353 'magnet':418,468 'make':200,830,1089,2540 'man':539 'manipul':1306 'match':958,1030 'may':564,566,949,1358 'mental':1143 'menu':1960,1974,1993,2010,2027 'messag':1680,2336,2364,2437 'michael':1481,1577,1817 'micromax':1015,1497,1593 'might':1408 'mind':1159 'model':1014,1496,1592 'modifi':1361 'monero':2596 'monitor':1064 'mv':1448 'name':855,1266 'navig':1975 'necessarili':829 'need':1409,1932,1942 'net':900 'network':878 'new':1384,1398,1417,1518,2102,2312 'newli':2286 'non':755 'non-destruct':754 'normal':2406 'note':106,720,1060,1078 'noth':2469,2497 'notifi':1857,1896 'notify-send':1856,1895 'occur':612 'ok':2159,2180,2184 'old':1394 'one':60,779,1028,1095,1399,1523,2565,2585 'onion':2605 'open':627,1971,2023 'oper':179,341 'oppress':336 'origin':113,2482,2518 'os':513 'outlin':667,729,801,833 'panel':1969 'part':59 'passphras':234 'paus':17 'perman':573 'permit':1231 'person':1702 'place':1539 'pleas':2551 'plug':1746,2320,2411 'plug-in':1745,2410 'plugging-in':2319 'point':1988,2307 'polic':372 'popup':1679,2335 'porous':2492 'posit':1438 'post':108,214,510,526,783 'prefer':1082 'prepar':348 'press':2177,2213 'prevent':1907 'previous':153,291,1334,1918 'privat':266 'privileg':1191 'probabl':1422 'procedur':1419,1663 'proceed':710 'prompt':2187,2212 'properti':1018,1026 'protect':363 'provid':626 'purchas':744,2553 'purpos':1469,1564,1801 'put':1536 'q':1958,1991,2021 'qube':185,319,512,851,879,1076,1113,1224,1447,1552,1789,2094,2106 'qubes-o':511 'qubes-rpc':1223 'qubeso':10,48,66,86,96,103,183,222,522,845,1100,1107,1137,1162,1342,1709,1926,1952,1984,2008,2025,2053,2070,2152,2205,2232,2279,2360,2433,2488,2508,2524 'queri':1040 'quick':379 'qvm':2116 'qvm-run':2115 'r4.1':1116 'ram':391,446 're':135,230,245,324,1149,1379,1607,1627 'read':70 'reader':1602 'reason':1247 'recommend':674 'recov':150,288 'reduc':1758 'refer':889,923 'regim':337 'releas':719,735,1114 'reload':1512,1845,1894 'remov':1372,1491,1587,1648,1688,2393 'replac':887,921,1024,1826,1875 'research':175,346 'respect':670 'respons':442,605 'result':615 'return':1740,2399 'right':332,2369,2442 'rip':455 'risk':596,728,792,1760 'rm':1835,1884 'rootf':159,299 'rout':1180 'rpc':1225 'rule':82,979,1309,1472,1520 'run':272,905,1070,1499,1595,2117 'sa':636 'safe':197,2586,2611 'save':1293 'say':322,2371,2444 'screen':491,761,1529,1568,1696,2002,2419 'screenshot':1982,2006,2051,2068,2150,2203,2230,2277,2358,2431 'script':680,1194,1241,1269,1298,1305,1322,1777,2145 'second':1639,1693,1865,1872,2265,2346,2376,2391,2398,2452 'secret':352,371 'section':1122,2476,2512 'secur':164,174,188,308,1246,2490,2500 'security-through-compartiment':187 'see':1049,1476,1572,1604,1672,1808,2473,2509 'select':2239 'self':42,503,739,1368 'self-destruct':41,502,738,1367 'send':1211,1858,1897 'sens':1615 'sent':1254 'sequenc':506 'set':1338,1922,2055,2072,2154,2207,2234,2281 'setting-up':1337,1921 'setup':6,80,517,1385,1946 'sever':472,831,975 'shift':2190,2241,2249,2291,2328 'ship':752 'shortcut':8,533,1286,1313,1671,1949,2035,2061,2086,2092,2104,2175,2195,2240,2254,2272,2289,2384,2457 'shouldn':1930 'show':2058,2075,2157,2210,2237,2284 'shred':165,309,389 'shut':494,1654,1700 'shutdown':39,385,763,825,1406,1828,1881,2357,2428 'shuts-down':1653 'site':2606 'sleep':1873 'soft':1405 'soft-shutdown':1404 'softwar':557,642,1059,2494,2538 'someon':128,238 'sourc':366 'specif':1008,1034,1047 'start':1959 'stay':2610 'steal':130,240 'store':2603 'strong':233 'subsystem':1492,1588 'sudden':373,431,1427 'sudo':1460,1504,1509,1555,1792,1834,1837,1842,1883,1886,1891,1909 'sure':220 'swap':1633 'switch':540 'sys':836,857,895,899,908,929,1074,1184,1200,1236,1301,1325,1328,1353,1445,1465,1550,1560,1787,1798,2119,2138 'sys-net':898 'sys-usb':835,856,894,907,928,1073,1183,1199,1235,1300,1324,1327,1352,1444,1464,1549,1559,1786,1797,2118,2137 'system':520,1977,2012,2029 'tab':2036,2062,2087 'tabl':458 'take':793,1139 'team':2614 'tee':1461,1556,1793 'temp':1802 'templatevm':933 'temporari':2313 'temporarili':15,1854 'test':2303,2310,2404 'tether':423 'think':1706 'though':1244 'throughout':804 'thug':464 'time':882,916 'toast':1678,2334,2363,2436 'tom':116,1813 'tool':1978,2013,2030 'top':351,1964,1998,2296,2368,2441 'top-left':1963,1997 'top-right':2367,2440 'top-secret':350 'total':572 'trigger':478,483,600,741,757,775,1364,1829,1833,1878,1882,2223,2258 'trip':420 'trip-wir':419 'troubleshoot':2462,2475 'trust':1259 'two':1635 'type':2112,2166,2188,2247,2326 'udev':81,956,963,978,1017,1066,1308,1519 'udevadm':1063,1510,1843,1892 'ui':1167 'understand':1146 'unlock':1718,2417 'unplug':2348,2421,2464 'us':2568 'usb':837,850,858,861,876,896,909,930,946,971,1042,1075,1173,1185,1201,1237,1302,1326,1329,1354,1446,1466,1493,1551,1561,1589,1788,1799,2120,2139,2466 'usb-qub':849 'use':201,231,686,962,982,995,1414,2221,2485,2505,2521 'user':26,591,767,1109,1117,1710,1762,1848 'util':416 'v4.1':1108 'valuabl':694 've':583 'version':1101 'via':1221 'video':405 'virtual':160,300 'vm':157,297,910,1186,1260 'vms':205,1197,1205,1233 'volatile.img':302 'wait':1675,1870,2331 'want':1425,1659,1713,2197,2219,2256,2548 'warn':718,800 'watch':401 'way':1641 'whatev':2193,2252 'whistleblow':328 'whonix':142,203,252,273 'wiki.archlinux.org':1020 'wiki.archlinux.org/index.php/udev#udev_rule_example).':1019 'window':2050,2056,2073,2155,2208,2235,2282 'wipe':1391 'wire':421 'within':1691 'without':34 'work':136,181,211,246,1731 'worker':333 'worst':816 'would':1712,1730 'written':1105 'www.buskill.in':50,88,399,407,2004,2017,2066,2081,2163,2228,2245,2301,2378,2449,2615,2617 'www.buskill.in/#demo)':406 'www.buskill.in/)':2616 'www.buskill.in/qubes-os/).':87 'www.buskill.in/wp-content/uploads/sites/8/2020/02/buskilldemo.mp4)](https://www.buskill.in/#demo)':398 'www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_buskill-armed1.png)](https://www.buskill.in/qubes-disarm/)':2448 'www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_buskill-disarmed1.png)](https://www.buskill.in/qubes-disarm/)':2377 'www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_featuredimage.jpg)](https://buskill.in/qubes-disarm)':49 'www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-add1.jpg.png)](https://www.buskill.in/qubes-disarm/)':2080 'www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-add2.png)](https://www.buskill.in/qubes-disarm/)':2162 'www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-add3.png)](https://www.buskill.in/qubes-disarm/)':2227 'www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-add4.png)](https://www.buskill.in/qubes-disarm/)':2244 'www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings-added1.png)](https://www.buskill.in/qubes-disarm/)':2300 'www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_keyboard-settings1.png)](https://www.buskill.in/qubes-disarm/)':2065 'www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_menu1.png)](https://buskill.in/qubes-disarm)':2003 'www.buskill.in/wp-content/uploads/sites/8/qubes-disarm_menu2.png)](https://www.buskill.in/qubes-disarm/)':2016 'www.buskillvampfih2iucxhit3qp36i2zzql3u6pmkeafvlxs3tlmot5yad.onion':2620 'www.gnu.org':654 'www.gnu.org/licenses/gpl-3.0.html)':653 'www.qubes-os.org':207,853,864,884,1227 'www.qubes-os.org/doc/disposablevm/)':206 'www.qubes-os.org/doc/installation-guide/#initial-setup),':883 'www.qubes-os.org/doc/qrexec/#qubes-rpc-services),':1226 'www.qubes-os.org/doc/usb-devices/)':863 'www.qubes-os.org/doc/usb-qubes/)':852 'www.whonix.org':294 'www.whonix.org/wiki/qubes/disposablevm#warnings)--as':293 'x':1911 'xfce':1968 'y':1452 'year':2545 'youtube.com':413 'youtube.com/v/qpwyod_cqr4](https://www.youtube.com/v/qpwyod_cqr4)*':412 'ⓘ':105,1077"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1696362188
    +visibility: "visible             "
    +apId: "https://monero.town/post/703020"
    +editedAt: null
    +createdAt: DateTimeImmutable @1696353188 {#118
      date: 2023-10-03 19:13:08.0 +02:00
    }
  }
  -cache: Symfony\Component\Cache\Adapter\TraceableTagAwareAdapter {#600 …}
}