I moved to Qubes back in 2013. Still using it!
On mobile, a major Chinese vendor (Xiaomi) has moved their Android stack to a microkernel based on the Apache NutX project. The OS is marketed as HyperOS its already on the market. Spent some time reading about it last week and it does sound a bit like a mobile version of Qubes.
If RIM is smart, they will brink back a new version of the Blackberry 10 platform. That used the same microkernel as QNX. I would not even be surprised if Apple bought RIM in the next year.
Google has their fuchsia microkernel OS, although its unclear whether they'll ever put it in a phone.
I think once you learn to appreciate the philosophy of these risk-isolation systems (via the old whitepapers and blogs from ITL/Qubes, for example) then "traditional" OS kernels become unacceptable for security. It isn't a matter having frequent patches or bits and pieces of the kernel acquiring new security tricks... their complexity is still the same, and that complexity is doing a f-ton of questionable non-security-related stuff all at the same high privilege as the security code.
"Wish the sun to stand still.." 🌞
npub1sj…9zuuc
2024-11-11 07:21:30 UTC
in reply to nevent1q…wse8
Author Public Key
npub1sj2xh2u7w3wdaaeez7mgnmfu5tah6j6h4k07xgkj6adumxtj2q4q09zuucSeen on
wss://relay.momostr.pinkPublished at
2024-11-11 07:21:30 UTCEvent JSON
{
"id": "36790d9d4863dad2c67aa3434f6562d7c21adac305bcca5b6cc86155de0a1082",
"pubkey": "84946bab9e745cdef73917b689ed3ca2fb7d4b57ad9fe322d2d75bcd9972502a",
"created_at": 1731309690,
"kind": 1,
"tags": [
[
"p",
"aab4c954e18a36e88036dc08c35d88a10c970ffddc9a0873495838353f9de6d5"
],
[
"proxy",
"https://infosec.exchange/@tasket/113463111874128051",
"web"
],
[
"p",
"50da224a8d0bd28e4c5388b5eff8555251e1c1fefe972bfa6fb1f42cc6c26341"
],
[
"e",
"55cbbc54a797622163b3f160a194b28b3f1691bd3af1127631587a45fef7d968",
"",
"root",
"aab4c954e18a36e88036dc08c35d88a10c970ffddc9a0873495838353f9de6d5"
],
[
"proxy",
"https://infosec.exchange/users/tasket/statuses/113463111874128051",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://infosec.exchange/users/tasket/statuses/113463111874128051",
"pink.momostr"
],
[
"-"
]
],
"content": "I moved to Qubes back in 2013. Still using it!\n\nOn mobile, a major Chinese vendor (Xiaomi) has moved their Android stack to a microkernel based on the Apache NutX project. The OS is marketed as HyperOS its already on the market. Spent some time reading about it last week and it does sound a bit like a mobile version of Qubes.\n\nIf RIM is smart, they will brink back a new version of the Blackberry 10 platform. That used the same microkernel as QNX. I would not even be surprised if Apple bought RIM in the next year.\n\nGoogle has their fuchsia microkernel OS, although its unclear whether they'll ever put it in a phone.\n\nI think once you learn to appreciate the philosophy of these risk-isolation systems (via the old whitepapers and blogs from ITL/Qubes, for example) then \"traditional\" OS kernels become unacceptable for security. It isn't a matter having frequent patches or bits and pieces of the kernel acquiring new security tricks... their complexity is still the same, and that complexity is doing a f-ton of questionable non-security-related stuff all at the same high privilege as the security code.",
"sig": "785cd4690c6049e6e66d87d3747987ba58c39115c1cfd0985a63d2ea16bca9580bb94be3d66ba9955b8e650b86626739ba14be7c62c96fdc0ba4720a1a43ae31"
}