←back to thread

441 points ploggingdev | 1 comments | | HN request time: 0s | source
Show context
notfed ◴[] No.15735828[source]
Note that while Qubes OS uses full-disk encryption, it runs on Xen, which does not support hibernate.

This means that, if you use this OS on a laptop, you'll be vulnerable to cold-boot attacks, even after you close your lid, unless you configure it to shutdown on lid close. (I.e., if a highly skilled adversary steals your laptop then, even if your laptop lid is closed, they will be able to read your RAM and therefore decrypt your entire hard drive.)

Despite the major security implications, it doesn't sound like a fix will be implemented any time soon. [1]

[1] https://github.com/QubesOS/qubes-issues/issues/2414

replies(2): >>15736066 #>>15736180 #
bearbearbear ◴[] No.15736066[source]
If a highly skilled thief wants to break into my house they could jimmy the latch on the window and let themselves in.

I don't have any bars on my windows to prevent that.

You need to draw the line somewhere.

replies(2): >>15736166 #>>15738307 #
1. notfed ◴[] No.15738307[source]
I agree that bars on my windows are a lot to ask for, and lack elegance and convenience.

My Linux OS can hibernate, and I've not found it to be noticeably inelegant or inconvenient. I suppose others' opinions may differ.