futurefillernow

Qubes is a cool idea, but it isn't enough for me. If it works for you, it's good. But I never want my bare metal touching anything directly. I would suggested a small CLI Tor gateway (like Whonix), and then a few full-blown VMs connecting through it (or NAT, depending).
#[5]

2023-01-02 16:54:17 UTC

- reply

Data can be saved in isolated, encrypted machines. Qubues is a resource hog, and there's no reason to run 20 VMs, really. Two or three dedicated, fully-encrypted VMs can isolate just fine, with more security.
#[6]

2023-01-02 16:52:53 UTC

- reply

The point of isolating VMs is to isolate compromise. It makes no sense to have VMs that are easily identifiable and unencrypted. If a running machine is compromised FDE doesn't help. But isolated encrypted machines with correctly configured permissions do.
#[5]

2023-01-02 16:48:31 UTC

- reply

#[6]

2023-01-02 01:43:02 UTC

- reply

Too many people think full disk encryption solves everything. It doesn't.
Even possessing unencrypted VMs is a huge attack vector. Plausible deniability should be the first line of defense.
If a VM can't be run in an isolated, encrypted container, it loses 99% of its security.

2023-01-02 01:32:11 UTC

- reply

Two problems with Qubes:
1. Can't run it in an isolated VM. It has to be bare metal. This is a huge problem for plausible deniability.
2. It's own VMs can't be encrypted. If an adversary gains access to the machine, all VMs are compormised.
It's way too vulnerable.

2023-01-02 01:23:51 UTC

- reply

#[1]

2023-01-02 01:05:14 UTC

- reply

#[6]

2023-01-02 01:04:55 UTC

- reply

#[5]

2023-01-02 01:04:10 UTC

- reply

#[5]

2023-01-01 15:50:48 UTC

- reply

#[0]

2022-12-31 17:43:30 UTC

- reply

#[1]

2022-12-31 02:20:10 UTC

- reply

#[1]

2022-12-30 19:38:13 UTC

- reply

#[2]

2022-12-30 17:09:13 UTC

- reply

#[2]

2022-12-30 17:08:38 UTC

- reply

#[2]

2022-12-30 14:46:29 UTC

- reply

#[1]

2022-12-30 14:44:05 UTC

- reply

#[7]

2022-12-30 14:42:59 UTC

- reply

#[2]

2022-12-29 21:18:37 UTC

- reply

#[0]

2022-12-29 20:24:19 UTC

- reply

#[1]

2022-12-29 20:19:40 UTC

- reply

#[1]

2022-12-29 20:19:28 UTC

- reply

#[2]

2022-12-29 15:29:55 UTC

- reply

#[1]

2022-12-29 15:25:59 UTC

- reply

#[5]

2022-12-28 18:31:31 UTC

- reply

Exactly. Why are people so hung up on UI? Electrum is another example. When running with a full node behind Tor, I don't think there's a better option. Why do people need "slick?"
And while we're on the subject... like I'm ever going to quit using bash.
#[6]