Partitioning my digital life into security domains (2011)

blog.invisiblethings.org

48 pointsmashally4 comments

Recently I've been musing about how to harden my home desktop setup, and perhaps Qubes is still something to look into. At present, I still feel a little pang of paranoia/guilt whenever I use sudo from the same account I do most of my web-browsing on.

I can put most software-development stuff into a rootless Docker container to deter supply-chain attacks--I'm not sure how that compares to Qubes virtualization--but if some 0-day gets in through a desktop app I'll be in trouble.

https://xkcd.com/1200/

P.S.: Looks like the lack of clear support for GPU stuff is decisively against it for me, I still want to play some Linux games, so I'll probably need to look into different ways to sandbox/limit things.

Looks like Qubes OS is still alive: https://github.com/QubesOS/

Qubes will always be inseparable in my mind from Joanna Rutkowska, but I notice she's no longer with the project. Does anyone know what prompted the split?

Reply on news.ycombinator.com