Qubes OS 4.3.0 has officially landed—and it looks awesome. Big step forward for privacy and security through isolation and compartmentalization. Time to upgrade.

Qubes OS

Qubes OS 4.3.0 has been released!

We’re pleased to announce the stable release of Qubes OS 4.3.0! This minor release includes a host of new features, improvements, and bug fixes. ...

Release notes:

Qubes OS

Qubes OS 4.3 release notes

Major features and improvements since Qubes 4.2: Dom0 upgraded to Fedora 41 (#9402)., Xen upgraded to version 4.19 (#9420)., Default Fedora templat...

Main improvements (from the 4.3 release notes): Core upgrades • dom0 upgraded to Fedora 41 • Xen upgraded to 4.19 • Default templates upgraded: Fedora 42, Debian 13, Whonix 18 (with older minimum-supported versions enforced) • Preloaded disposables for faster DisposableVM startup • New Devices API (“self-identity oriented” device assignment) • Qubes Windows Tools (QWT) reintroduced with improved features UI/UX polish • New device workflow built around the new Devices API, plus a dedicated Device Assignments page and a redesigned Devices widget • New/improved flat icons across GUI tools • Qube Manager cleanup (far-left icons removed) • Application icons now show in VM Settings • Option to add the Qubes video companion to the AppMenu • Better AppMenu keyboard navigation • Clearer updater wording/settings • Centralized tray notifications • Quick-launch root terminal or console terminal from the Domains widget • Global Config improvements (deep-link to sections, plus a “Saving changes...” dialog) GUI daemon/agent improvements • Configurable GUI daemon background color (nice for dark themes) • Audio daemon won’t connect to recording streams unless recording is explicitly enabled • Legacy X11 app icons display properly • Virtual pointing device labeled as absolute (not relative) • Better global clipboard notifications, plus configurable clipboard size • Better support for Windows qubes on systems using sys-gui* Hardware support improvements • Better support for Advanced Format (4K sector) drives • Device assignments use full PCI paths instead of bus/slot/function • Filter input devices with udev rules • Fixes for graceful reboot on some buggy (U)EFI firmware • Better Bluetooth + hot-pluggable audio support with dynamic AudioVM switching Security features • Templates can request custom kernel cmdline parameters (currently used for Kicksecure/Whonix user-sysmaint-split) • VMs can specify boot modes intended only for AppVMs or templates • GRUB2 from Fedora shipped with security patches + Bootloader Specification support • SSL client cert + GPG key support for private template repositories • Prevent unsafe third-party template installs via rpm/dnf • Ability to prohibit start of specific qubes • UUID support for qubes, including using UUIDs in policies • “Custom persist” feature to reduce unwanted persistence Anonymity improvements • Whonix-Workstation qubes can’t open files/URLs/apps in non-Whonix disposables • Prevent changing Whonix Workstation netvm to sys-firewall (or other clearnet netvms) to reduce IP leak risk • kloak: keystroke-level online anonymization kernel Performance optimizations • Option to use volumes directly without snapshots • Retire qubes-rpc-multiplexer and execute commands directly from C • Cache “system info” for qrexec policy evaluation • Minimal state qubes to reduce RAM usage for NetVM/USBVM Updating & upgrading • Always hide specific templates/standalones from update tools • pacman hook to notify dom0 after successful manual Archlinux upgrades • Improved 4.2→4.3 upgrade tool (including using lvmdevices instead of device filter) New/improved experimental features • Ansible support • Qubes Air support • qrexec protocol extension to send source info to destination • Better GUIVM support (GUI/Admin split, auto-remove nomodeset when GPU attached) • Initial steps toward Wayland session-only support in GUIVM (not full GUI agent/daemon Wayland yet) Other quality-of-life • Free-form notes on qubes (descriptions/reminders/etc.) • Auto-clean QubesIncoming if empty • vm-config.* features to pass external config into a qube • Admin API to read/write the denied device-interface list • New Devices API support for salt Dropped/replaced • Default screen locker switched from XScreenSaver to xfce4-screensaver • “Create Qubes VM” retired in favor of “Create New Qube” • Windows 7 support dropped from QWT Overall, this feels like a more mature, refined release—better usability and device handling, real performance wins, and tighter guardrails where it matters. #IKITAO #OPSEC #QubesOS

Just scored the full 2025 Guns & Ammo Magazine collection 😎👍🏻 #IKITAO #PHYSEC #SELF-SOVEREIGNTY

Rollins Band - Liar YT #RollinsBand #Music

Over a dozen Epstein files disappear from DOJ site including Trump photo "An Associated Press review found at least 16 files were missing, including images of paintings depicting nude women, and one showing a series of photographs in a drawer. One picture in the drawer featured Trump alongside Epstein, Melania Trump and Epstein's longtime associate Ghislaine Maxwell." The next bit of gaslighting is "the most transparent in history." "The White House did not comment directly on The Independent's request for comment on the alleged disappearance of the Trump photo but said the Epstein files release makes this administration “the most transparent in history.”

The Independent

Over a dozen Epstein files disappear from DOJ site including Trump photo

I love old radio shows—especially those preserved by the OTRR group. They’ve spent years tracking down and archiving the highest-quality versions of classic broadcasts—many of which would otherwise be lost to time. Love that they've left the old ads in too! Lately, I can’t get enough of The Adventures of Philip Marlowe. Van Heflin was okay on the short-lived 1947 NBC run, but Gerald Mohr, who took over in '48 for the CBS run, IS the voice of Philip Marlowe. Maintained archive (best available quality):

Internet Archive

Adventures of Philip Marlowe : Old Time Radio Researchers Group : Free Download, Borrow, and Streaming : Internet Archive

ADVENTURES OF PHILIP MARLOWE Elements of mystery have always been represented in literature, but the detective story didn

If YouTube is more your speed, you can find the OTRR official page here with tons of great shows: https://youtube.com/playlist?list=PLlUoyloCGlWy0wYJQk1r07LEmlItn-b-_&si=6QKqqzT4zPuGiC-M *Gerald Mohr's run starts at episode 6, "The Red Wind" in the playlist. I've included it here for your listening pleasure* OTRR—Old Time Radio Researchers Group—does some of the most important preservation work out there. When better recordings surface, the archive gets updated. This is important work, worth supporting. If you care about preserving old-time radio, check them out: Website:

Old Time Radio Researchers

Facebook group: https://www.facebook.com/groups/1677714482510214/ Groups(.)io:

main groups.io Group

The Old Time Radio Researchers group is a community of enthusiastic fans, avid listeners, and strong supporters of old rime radio. The group’s go...

#IKITAO #OTRR #OldTimeRadio #TheAdventuresOfPhilipMarlowe

Just saying... #IKITAO #AvaMemes

It's funny because it's true. View quoted note →

@Moxie girl 💜 #IKITAO #Moxie #Sphynx #Cat

@Moxie girl 💜 #IKITAO #Moxie #Sphynx #Cat

It's not wrong—but once you go Linux... #IKITAO #LinuxMemes

Happy little accidents...

The revolution will not be televised. It will be relayed. #IKITAO

If follower counts don't matter on #Nostr, then that's communism. If WOT is the metric, then that's elitism at the cool kids table. Follower counts do matter—they're a signal, not a sin. #IKITAO #GrowNostr

Mission complete. View quoted note →