bsergay

joined 4 months ago
[–] bsergay@discuss.online 3 points 4 months ago* (last edited 4 months ago)

Compartmentalization buys you disposable VMs.

And more.

TAILS is amnesic, which is an improvement to this.

How? Please focus on the security merits.

Everything is lost between sessions

If this is your reasoning to justify your earlier statement, please explain how this outdoes Qubes OS when it comes to security.


Btw, it seems you're conflating protection against forensics with a proper security model. In terms of security, TAILS does not provide anything remotely comparable to Qubes OS. Qubes OS is literally built differently. In case you enjoy tables.

[–] bsergay@discuss.online 4 points 4 months ago (2 children)

Windows 11 minimally requires: Memory: 4 gigabytes (GB) or greater.

Qubes OS minimally requires: Memory: 6 GB RAM

[–] bsergay@discuss.online 3 points 4 months ago* (last edited 4 months ago) (4 children)

Unfortunately my 8gb RAM (for which 2gb is dedicated for the iGPU) isn't enough. FWIW, this system could technically run Windows (11) without any troubles.

[–] bsergay@discuss.online 4 points 4 months ago (3 children)

Please correct me if I'm wrong, but isn't compartmentalization through virtualization the best solution we currently have?

[–] bsergay@discuss.online 5 points 4 months ago (2 children)

May as well contribute my own 😜.

I'm an absolute sucker for exquisitely hardened distros. Hence, distros like Qubes OS and Kicksecure have rightfully caught my interest. However, the former's hardware requirements are too harsh on the devices I currently own. While the latter relies on backports for security updates; which I'm not a fan of. Thankfully, there is also secureblue.

Contrary to the others, secureblue is built on top of an 'immutable' and/or atomic base distro; namely Fedora Atomic. By which:

  • It's protected against certain attacks.
  • Enables it to benefit from more recent advancements and developments that benefit security without foregoing robustness.

If security is your top priority, Qubes OS is the gold standard. However, secureblue is a decent (albeit inferior) alternative if you prefer current and/or 'immutable'/atomic distros.

[–] bsergay@discuss.online 4 points 4 months ago (6 children)

May as well contribute my own 😜.

I'm an absolute sucker for exquisitely hardened distros. Hence, distros like Qubes OS and Kicksecure have rightfully caught my interest. However, the former's hardware requirements are too harsh on the devices I currently own. While the latter relies on backports for security updates; which I'm not a fan of. Thankfully, there is also secureblue.

Contrary to the others, secureblue is built on top of an 'immutable' and/or atomic base distro; namely Fedora Atomic. By which:

  • It's protected against certain attacks.
  • Enables it to benefit from more recent advancements and developments that benefit security without foregoing robustness.

If security is your top priority, Qubes OS is the gold standard. However, secureblue is a decent (albeit inferior) alternative if you prefer current and/or 'immutable'/atomic distros.

[–] bsergay@discuss.online 14 points 4 months ago (11 children)

May as well contribute my own 😜.

I'm an absolute sucker for exquisitely hardened distros. Hence, distros like Qubes OS and Kicksecure have rightfully caught my interest. However, the former's hardware requirements are too harsh on the devices I currently own. While the latter relies on backports for security updates; which I'm not a fan of. Thankfully, there is also secureblue.

Contrary to the others, secureblue is built on top of an 'immutable' and/or atomic base distro; namely Fedora Atomic. By which:

  • It's protected against certain attacks.
  • Enables it to benefit from more recent advancements and developments that benefit security without foregoing robustness.

If security is your top priority, Qubes OS is the gold standard. However, secureblue is a decent (albeit inferior) alternative if you prefer current and/or 'immutable'/atomic distros.

[–] bsergay@discuss.online 4 points 4 months ago

It is slower than btrfs

What evidence supports your statement, given that it contradicts the overall results of tests conducted in the past year by both DJ Ware and Michael Larabel from Phoronix?

[–] bsergay@discuss.online 68 points 4 months ago (3 children)
[–] bsergay@discuss.online 46 points 4 months ago (28 children)
view more: ‹ prev next ›