Hacker News Reader

> Linux isn't like macOS, it doesn't have any kind of proper desktop sandboxing architecture that really works.

As a QubesOS user, I beg to differ. Just because most Linux distros are negligent with sandboxing does not mean all of them are.

View on HN

Funny because there is a 101 level Qubes RCE on front page right now.

Sigh. Qubes had some great security design and implemented it the only way time/funds would allow: by cobbling together a lot of unfortunately very complex and broken things built for a different security model decades ago.

Qubes is the least bad option for laptops (until Stagex Work ships which I am designing) but there is no reasonable server OS.

I am ripping off the best ideas from xen/Qubes and starting over with: https://distrust.co/blog/enclaveos.html

Eh. That happens sometimes, but its design and track record is really good.

what are you on about? The fact Qubes has to exist proves Linux is insecure. QubesOS is not a Linux distro. It just happens to ship dom0 as a Fedora VM. But it doesn't just support Linux, it also supports Windows and BSDs. None of Qubes security guarantees come from the Linux kernel.

Reply on news.ycombinator.com