4 ms·
The point of Qubes is not perfection. It instead tries to put in barriers so that compromising one part does not compromise the whole.
by slaymaker1907 9y ago
The point of Qubes is not perfection. It instead tries to put in barriers so that compromising one part does not compromise the whole.
- krylon 9y agoIf I understand it correctly, ME has basically unrestricted access to RAM, bypassing the CPU and any restrictions the hypervisor and/or operating system may impose. If I can peek and poke around in your RAM as I please, no amount of cleverness is going to save you if my intentions are malicious. (Don't worry, though, I have no such intentions, and I don't fiddle with other people's RAM as a matter of principle, unless they ask me to. ;-))
- slaymaker1907 9y agoYou can prevent certain things through address randomization and by using canaries to try and detect intrusions. I think if you made the system self modifying and incorporated a true RNG, it would be theoretically possible to obfuscate it at run time to malicious observers assuming attackers haven't seen observed the complete obfuscation process.