I came across this reply by unman while reading through the Qubes Whonix security <https://www.whonix.org/wiki/Qubes-Whonix_Security#Template_and_Other_VMs> page:
>It is the qubes that perform update checks and then notify dom0 accordingly. So if you have a qube connected to clearnet it will check over clearnet. >You can disable this in clearnet connected qubes - it's the qubes-update-check service. >Or you can disable globally in qubes-global-settings. https://www.mail-archive.com/[email protected]/msg27567.html While the Whonix Wiki maintainer thinks its enough of an issue to include on the Whonix security page, Marek doesn't think time-based correlation is an issue ("When you actually download and install those updates (over Tor) in the template is up to you, it isn't immediately after checking if something is available, so time based correlation isn't really an issue here <https://groups.google.com/forum/#!msg/qubes-users/VuD2GiC00qI/vng8YerOBgAJ> "). Though it's not clear to me whether this is actually an issue, I figured I'd do it anyways. My question is, if I wanted to disable qubes-update-check service, how would I go about updating my templates over tor? Do I create debian and fedora templates linked to sys-whonix just to get updates? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/eadac1c4-f3df-4559-a2f1-edf58f7bb09fo%40googlegroups.com.
