The Operating System That Can Protect You Even if You Get Hacked
1–10 of 53 posts
Re: The Operating System That Can Protect You Even if You Get Hacked
#2Of course, the entire premise of this operating system is that VMs are secure, even though there have been exploits targeting them in the past [0].
Disabling virtualization capabilities in the bios is a semi-common recommendation for securing a computer... Still, this OS is a darn sight better than nothing and it'll certainly protect against most things. However, touting it as perfect is misleading.
Re: The Operating System That Can Protect You Even if You Get Hacked
#3Of course, the entire premise of this operating system is that VMs are secure, even though there have been exploits targeting them in the past [0]. Disabling virtualization capabilities in the bios is a semi-common recommendation for securing a computer... Still, this OS is a darn sight better than nothing and it'll certainly protect against most things. However, touting it as perfect is misleading. [0]: https://en.w…
If they can break out of Chrome sandboxes they can target Qubes
Re: The Operating System That Can Protect You Even if You Get Hacked
#4The 3 people who work on Qubes [0] are very good security researchers and I have more faith in their work than most.
It should be noted that the OS's VM'ing is based on the Xen bar-metal VM kernel which is pretty well researched, small, and elegant.
Re: The Operating System That Can Protect You Even if You Get Hacked
#5Of course, the entire premise of this operating system is that VMs are secure, even though there have been exploits targeting them in the past [0]. Disabling virtualization capabilities in the bios is a semi-common recommendation for securing a computer... Still, this OS is a darn sight better than nothing and it'll certainly protect against most things. However, touting it as perfect is misleading. [0]: https://en.w…
If they can break out of Chrome sandboxes they can target Qubes
I don't see how that follows or relates; chrome's sandboxes are definitely not VMs... VMs are in general better understood and far better isolated.
Can you expound on that comment?
Re: The Operating System That Can Protect You Even if You Get Hacked
#6Earlier quoted context omitted.
If they can break out of Chrome sandboxes they can target Qubes
I don't see how that follows or relates; chrome's sandboxes are definitely not VMs... VMs are in general better understood and far better isolated. Can you expound on that comment?
At some level to use an OS, Qubes need to be able to talk to each other. We've had hacks which break TCP stacks, OpenSSL (recently) and practically every other type of subsystem.
Hell, Cryptolocker shows up that fundamentally the whole thing is solving the wrong problem in the first place for ordinary users, which is who cares if the OS survives if your data doesn't?
Re: The Operating System That Can Protect You Even if You Get Hacked
#7Earlier quoted context omitted.
If they can break out of Chrome sandboxes they can target Qubes
I don't see how that follows or relates; chrome's sandboxes are definitely not VMs... VMs are in general better understood and far better isolated. Can you expound on that comment?
How is the isolation in Xen better than Chrome sandboxes - do you mean the attack surface is smaller, the code quality better, or the task somehow inherently simpler/easier?
From where I sit, vulnerabilities in virtualization have seen less public scrutiny than the Chrome sandbox. Eg none of the hypervisor vendors have a bug bounty program, which would be at least some kind of signal.
Re: The Operating System That Can Protect You Even if You Get Hacked
#8If this was to catch on, would the NSA (assuming they don't already) throw more resources at building viruses that attack the CPU directly - intercepting any of the instructions sent by the VMs?
Re: The Operating System That Can Protect You Even if You Get Hacked
#9Of course, the entire premise of this operating system is that VMs are secure, even though there have been exploits targeting them in the past [0]. Disabling virtualization capabilities in the bios is a semi-common recommendation for securing a computer... Still, this OS is a darn sight better than nothing and it'll certainly protect against most things. However, touting it as perfect is misleading. [0]: https://en.w…
You do know that the Blue Pill exploit was created by the developers of Qubes, right?
Re: The Operating System That Can Protect You Even if You Get Hacked
#10I'm really hoping they do a server-oriented flavor of Qubes -- would be tremendously useful.