(www.qubes-os.org)

441 points ploggingdev | 1 comments | 19 Nov 17 16:06 UTC | HN request time: 0.248s | source

Show context

snvzz ◴[19 Nov 17 17:00 UTC] No.15734641[source]▶

Their weakest point is the hypervisor, Xen, which while a better choice than Linux/KVM, is still extremely bloated and has a poor security history.

Thankfully, better designs such as seL4's VMM do exist, although it might need a little more work [1] until usable for the purpose.

1. mtgx ◴[19 Nov 17 17:34 UTC] No.15734841[source]▶

The Genode team proposed some integration with Qubes a while ago, but not sure if the discussion went anywhere from that:

Qubes OS: A reasonably secure operating system