43 karma · joined November 21, 2016
None I've encountered so far are actually good enough to compete. This one doesn't seem any different.
If you are victim of such an attack, the encryption of the file is broken as well.
The problem won't solve itself by adoption if it never gets to that point, that's almost a perfect catch-22.
Currently all applications assume they get access to everything by default, so even if one was to be able to implement a confirmation dialog, the user would be victim to a battery of requests.
This is not to mention that isolation excludes discoverability, so users would have to manually make files visible to other applications beforehand.
The certification requirements are higher, but that's basically if people want to stick the Qubes-certified label on their devices, signaling to customers that it measures up to the highest standards of security.
They're not necessary to run Qubes, they're just ideal.
I've also been looking at how projects like Hypercontainer and Clear Containers achieve minimal VM overhead to expand the model to a per-application-instance VM.
Another interesting enabling technology is VirtFS, which can be used for filesystem-level storage virtualization to gain the many benefits of COW and shared caching.
The principal question then is how to allow interaction between different application instances without the user having to manually ferry files between them, as it currently happens with AppVMs on Qubes.
linksunten.indymedia is not actually a club, as which it was forbidden, nor did they publish the contents themselves. As such, they should be subject to the 'Telemediengesetz' just like e.g. Facebook and sued on this basis.