|
|
|
|
|
by paravirtualized
941 days ago
|
|
It's highly unlikely that any operating system can be as secure as Qubes OS[1], simply by considering the model itself. Especially if using Whonix[2] VMs to browse the internet. It is based on GNU/Linux and Xen. Each piece of software can be separated into its own VM. It uses read only templates for the root filesystem, making it difficult for malware to persist. Templates have no access to networking or hardware making it difficult for them to be compromised, AppVMs where you run software can be treated as throwaway and be trivially destroyed after each use. Dom0 has no access to networking, USB devices and runs no software. Total compromise would require a hypervisor escape. It is designed with the assumption that you will be owned start to finish. [1]: https://www.qubes-os.org/ [2]: https://www.whonix.org/wiki/Qubes |
|